Privacy Policy

1. Who We Are

Alametria ("we", "us", "our") operates the website builder service at alametria.com. We are the data controller for personal data collected through our Service. Contact us at support@alametria.com for any privacy-related queries.

2. What Data We Collect

• Account data — Your name, email address, and profile photo provided when you sign in via Google.
• Profile content — All information you enter when building your site — bio, skills, experience, services, links, and any other content you choose to publish.
• Usage data — Pages visited, features used, and interaction logs to help us improve the Service.
• Payment data — We do not store your payment card details. Payments are processed by Paddle.com, who act as the Merchant of Record. Paddle's privacy policy applies to payment data.
• Communications — Emails you send to our support address and any feedback you provide.

3. How We Use Your Data

• Service delivery — To create, host, and display your personal website.
• Account management — To authenticate you, send your edit link, and manage your account.
• Payments — To process your subscription and communicate payment status.
• Service improvements — To understand how the Service is used and fix issues.
• Legal compliance — To meet our obligations under applicable laws.

4. Legal Basis for Processing (GDPR)

If you are located in the UK or EU, we process your personal data on the following legal bases: (a) Contract — to provide the Service you have requested; (b) Legitimate interests — to improve and secure the Service; (c) Consent — where you have explicitly agreed, e.g. marketing communications; (d) Legal obligation — where required by law.

5. Data Sharing

• Supabase — Database hosting and authentication infrastructure. Data is stored on servers in the EU/US region.
• Paddle — Payment processing and Merchant of Record for all transactions.
• Resend — Transactional email delivery (edit links, payment confirmations).
• Vercel — Website hosting and CDN infrastructure.
• Cloudflare — DNS, CDN, and DDoS protection.

6. Data Retention

We retain your account and profile data for as long as your account is active, plus 90 days after account deletion to allow for recovery. Payment records are retained for 7 years as required by financial regulations. You may request deletion of your data at any time by emailing support@alametria.com.

7. Your Rights

If you are in the UK or EU, you have the right to: access your personal data; correct inaccurate data; request deletion of your data; object to or restrict processing; data portability; and lodge a complaint with your local supervisory authority (in the UK: the ICO at ico.org.uk). To exercise any of these rights, contact support@alametria.com.

8. Cookies

We use essential cookies to keep you signed in and maintain session state. We do not use tracking or advertising cookies. No cookie consent banner is shown as we only use strictly necessary cookies.

9. International Transfers

Your data may be transferred to and processed in countries outside your own, including the United States. Where such transfers occur, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses) in compliance with applicable data protection laws.

10. Children

The Service is not directed to children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a notice on the Service. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

12. Contact

For any questions about this Privacy Policy or how we handle your data, contact us at support@alametria.com.