Privacy Policy

2025-09-28

Ponchii OÜ ('Ponchii', 'we') operates the Ponchii platform. This Privacy Policy explains how we handle your data.

1. Information We Collect - Account data: email, username, password (via Supabase) - Payment data: handled securely by Stripe Connect - Communication data: emails via Postmark We do not use analytics or tracking cookies.

2. How We Use Data We use data to create accounts, process payments, and communicate updates.

3. Third-Party Services - Supabase – authentication & database - Stripe – payment processing - Postmark – transactional email - Cloudflare – hosting & security Each service complies with GDPR and has its own privacy policy.

4. Legal Basis (GDPR) We process data based on contract, consent, and legal obligations (such as taxes).

5. Data Retention We retain user data while your account is active or as required by law.

6. Your Rights You can request access, correction, or deletion of your data, and withdraw consent. Contact: contact@ponchii.com

7. Security We use Supabase and Cloudflare security. While no system is 100% secure, we take reasonable steps to protect your information.

8. Updates This policy may change. The latest version will always appear on our website.