Privacy Policy

Data controller: Next Real sp. z o.o., Poland. Contact: [email protected].

What we collect

Account data (email, hashed password or Google ID), purchase records (via Paddle — we never see card numbers), redeemed codes, and first-party usage events (page views, configurator opens, download clicks) stored with your user id or anonymously. No third-party ad trackers.

Why

To provide the service (auth, downloads, licenses), to improve the product (aggregate usage stats) and to meet accounting obligations (purchase records). Legal bases: contract performance, legitimate interest, legal obligation.

Processors

Supabase (auth & database, EU region), Vercel (hosting), Paddle (payments, merchant of record), Google (optional sign-in). Data stays within these processors; we do not sell it.

Cookies

We use only strictly necessary cookies: Supabase session cookies that keep you signed in. No analytics or advertising cookies are set, which is why there is no cookie banner. First-party usage events are collected server-side under legitimate interest and can be attributed to your account only while it exists.

Marketing emails

We send product news only if you opted in — at sign-up or later in Account settings. Every email includes an unsubscribe link, and the toggle in Account works instantly. Opting out never affects purchased access.

Retention & your rights

Account data lives until you delete your account; purchase records as long as tax law requires; events up to 24 months. You can export your data and delete your account yourself in Account settings (deletion is immediate and permanent; purchase records required by tax law are kept without the account link). You can also request access, correction or deletion at [email protected]. You may also complain to your data protection authority (in Poland: PUODO).