Privacy Policy

1) Controller and contact

Data controller: Reptilians
Contact email: [email protected]

If you are in the EEA/UK, you may have rights under applicable data protection laws (including GDPR). We address those rights below.

2) What data we collect

We collect information depending on how you use the Services.

A) Information you provide

• Contact details (e.g., name, email) when you fill forms, request a quote, or contact us.
• Project details you submit (briefs, attachments, messages).
• Account data (if Apps include accounts): username, email, and any profile fields you choose to add.

B) Information collected automatically (Website and Apps)

• Device and usage data: device type, OS version, app version, pages/screens viewed, actions taken, timestamps, language, referrer.
• Log data: IP address (Website), server logs, error logs.
• Diagnostics / crash data: crash reports, performance metrics, and debugging information.

C) Cookies and similar technologies (Website)

We may use cookies/local storage for:

• essential functionality (security, session management),
• preferences,
• analytics (if enabled).

You can control cookies via your browser settings. Some features may not work without essential cookies.

D) Data we do NOT intend to collect

Unless explicitly stated inside a specific app, we do not intentionally collect:

• sensitive personal data (e.g., health data, biometrics, precise location, government IDs),
• children's data.

If any specific app requires additional categories (e.g., health-related inputs), that app must provide clear in-app disclosures and consent flows where required.

3) How we use data (purposes)

We use your data to:

• Provide and operate the Services (deliver features, respond to requests, maintain accounts).
• Communicate with you (support, updates, transactional messages).
• Improve and secure the Services (analytics, troubleshooting, monitoring, fraud prevention).
• Comply with legal obligations and enforce our Terms.
• Business operations (internal reporting, administration).

4) Legal bases (EEA/UK users)

Where applicable, we rely on:

• Contract (to provide the Services you request),
• Legitimate interests (security, improvement, fraud prevention),
• Consent (where required, e.g., certain cookies, marketing, or optional data collection),
• Legal obligation (compliance).

5) How we share data

We do not sell your personal data.

We may share information with:

• Service providers/processors that help us run the Services (hosting, email delivery, analytics, crash reporting, customer support tools).
• Legal authorities if required by law or to protect rights, safety, and security.
• Corporate events (merger/acquisition/restructuring) where data may transfer as part of the transaction.

Service provider transparency

• Hosting: DigitalOcean / Cloudflare
• Analytics: PostHog
• Crash reporting: Sentry

6) International transfers

Your data may be processed in countries other than where you live. Where required, we use appropriate safeguards for cross-border transfers.

7) Data retention

We retain personal data only as long as necessary for the purposes described above, including:

• to provide the Services,
• to comply with legal obligations,
• to resolve disputes and enforce agreements.

Retention periods vary by data type. You may request deletion where applicable (see Section 9).

8) Security

We use reasonable administrative, technical, and organizational measures to protect data. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9) Your privacy rights

Depending on your location, you may have the right to:

• access, correct, or delete your personal data,
• object to or restrict processing,
• withdraw consent (where processing is based on consent),
• data portability,
• lodge a complaint with a supervisory authority.

To exercise rights, contact us at [email protected]. We may verify your identity before fulfilling requests.

10) Marketing communications

If we send marketing emails, you can opt out at any time using the unsubscribe link or by contacting us. We may still send non-marketing service messages (e.g., security or transactional notices).

11) Children's privacy

The Services are not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child provided data, contact us and we will delete it where required.

12) Third-party links

The Services may link to third-party sites. Their privacy practices are not controlled by us. Review their policies before providing information.

13) Changes to this policy

We may update this Privacy Policy. If changes are material, we will post the updated version with a new "Last updated" date. Continued use means you accept the updated policy.

14) Contact

Privacy questions or requests: [email protected]