Privacy Policy

1. Introduction

This Privacy Policy explains how Ilyssa Software Ltd ("we", "our", or "us") collects, uses, and protects personal data when you use our apps and services, including authentication across ilyssa.software and its subdomains. We are committed to ensuring the privacy and security of your personal information in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

Ilyssa Software Ltd is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at support@ilyssa.software.

3. Data We Collect

We collect and process the following categories of personal data:

3.1 Information You Provide Directly

Authentication information (email address and, when provided through third-party authentication providers like Google, your name) when you register or sign in
Communications you send to us via email when contacting support

3.2 Information Collected Through Third-Party Services

Authentication data processed through Auth0, which may include your name if you sign in using a third-party provider like Google
Payment information processed through Stripe (we do not store your complete payment details)

3.3 Technical Information

IP address and access logs (for security purposes)
Technical information necessary for providing the service

4. How We Use Your Data

We use your personal data for the following purposes:

To provide and maintain our apps and services
To manage your account and authentication across our platforms
To process payments
To communicate with you regarding service updates or respond to your inquiries
To ensure the security of our services
To comply with legal obligations

Important: We do not use analytics libraries or serve advertisements. We do not track your browsing behavior for marketing purposes or share your data with third parties for advertising.

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Contract fulfillment: Processing necessary to fulfill our contract with you to provide our services
Legitimate interests: Processing necessary for our legitimate interests, such as ensuring the security of our services
Legal obligation: Processing necessary to comply with our legal obligations
Consent: Where we have your explicit consent to process your data for specific purposes

6. Data Sharing and Transfers

We share your personal data with the following categories of recipients:

Auth0: For authentication services
Stripe: For payment processing
Cloud infrastructure providers: For hosting and delivering our services

These providers are bound by contractual obligations to keep personal information confidential and use it only for the purposes for which we disclose it to them. When we transfer your data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place in compliance with GDPR requirements, such as Standard Contractual Clauses.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. After account termination, we retain certain information as required for legal, financial, or security purposes.

8. Your Rights

Under the GDPR and applicable data protection laws, you have the following rights:

Right to access: You can request a copy of the personal data we hold about you
Right to rectification: You can request correction of inaccurate or incomplete data
Right to erasure: You can request deletion of your personal data in certain circumstances
Right to restrict processing: You can request restriction of processing in certain circumstances
Right to data portability: You can request the transfer of your data to you or a third party
Right to object: You can object to processing based on legitimate interests

To exercise these rights, please contact us at support@ilyssa.software. We will respond to your request within one month.

9. Cookies

Our services use necessary session cookies to maintain your authenticated state. These cookies are essential for the functioning of our services. We do not use cookies for analytics, advertising, or tracking purposes.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage. However, no data transmission over the Internet can be guaranteed to be 100% secure.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes through our website or by email.

12. Complaints

If you are concerned about how we handle your personal data, please contact us first so we can address your concerns. You also have the right to lodge a complaint with a supervisory authority in the EU member state where you reside, work, or where the alleged infringement occurred.

13. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us at support@ilyssa.software.

Ilyssa Software Ltd
Company number: 11240406