​

Introduction

We (“we,” “us,” “our”) take the protection of the data of the users (“users” or “you”) of our website and/or mobile app (the “website” or “mobile app”) very seriously and are committed to protecting the information that users provide to us in connection with the use of our website and/or mobile app (together, the “digital assets”). Furthermore, we are committed to protecting and using your data in accordance with applicable law.

This Privacy Policy explains our practices regarding the collection, use, and disclosure of your data through the use of our digital assets (the “services”) when you access the services via your devices.

Please read this Privacy Policy carefully and ensure that you fully understand our practices regarding your data before using our services. If, after reading and fully understanding this policy, you do not agree with our approach, you must stop using our digital assets and services. By using our services, you acknowledge the terms of this Privacy Policy. Continued use of the services constitutes your consent to this Privacy Policy and any changes made to it.

In this Privacy Policy, you will learn about:

• How we collect data

• What data we collect

• Why we collect this data

• To whom we disclose the data

• Where the data is stored

• How long the data is retained

• How we protect the data

• How we handle minors

• Updates or changes to the Privacy Policy

What Data Do We Collect?

Below is an overview of the data we may collect:

• Non-identifiable and non-identifiable information that you provide during the registration process or that is collected through the use of our services (“non-personal data”). Non-personal data does not allow us to infer who it was collected from. Non-personal data we collect mainly consists of technical and aggregated usage information.

• Personally identifiable information, i.e., any information that can identify you or could reasonably identify you (“personal data”). Personal data we collect through our services may include information that is requested from time to time, such as names, email addresses, addresses, phone numbers, IP addresses, and more. If we combine personal data with non-personal data, it will be treated as personal data for as long as they remain in combination.

How Do We Collect Data?

Here are the main methods we use to collect data:

• We collect data when you use our services. When you visit our digital assets and use the services, we may collect, capture, and store usage, session, and related information.

• We collect data that you provide to us directly, such as when you contact us via a communication channel (e.g., sending an email with comments or feedback).

• We may collect data from third-party sources as described below.

• We collect data you provide to us when you log in to our services through a third-party, such as Facebook or Google.

Why Do We Collect This Data?

We may use your data for the following purposes:

• To provide and operate our services;

• To develop, customize, and improve our services;

• To respond to your feedback, requests, and inquiries and offer support;

• To analyze demand and usage patterns;

• For other internal, statistical, and research purposes;

• To improve our data security and fraud prevention capabilities;

• To investigate violations and enforce our terms and policies, as well as to comply with applicable law, regulations, or governmental orders;

• To send you updates, messages, promotional material, and other information related to our services. For promotional emails, you can decide whether to continue receiving them. If not, simply click the unsubscribe link in these emails.

Who Do We Share This Data With?

We may share your data with our service providers to operate our services (e.g., data storage via third-party hosting services, providing technical support, etc.).

We may also disclose your data under the following circumstances: (i) to investigate, detect, prevent, or address unlawful activities or misconduct; (ii) to assert or exercise our rights; (iii) to protect our rights, property, or personal safety, as well as the safety of our users or the public; (iv) in the event of a change of control in our company or one of our affiliates (via merger, acquisition, or purchase of (substantially) all assets, etc.); (v) to collect, store, and/or manage your data via authorized third parties (e.g., cloud service providers) as appropriate for business purposes; (vi) to collaborate with third parties to improve your user experience. For the avoidance of doubt, we may transfer non-personal data to third parties at our discretion.

Without your consent, we will not share your email address or other personal data with advertising companies or ad networks.

Where Do We Store the Data?

• Non-personal data: Please note that our company and our trusted partners and service providers are located around the world. For the purposes outlined in this Privacy Policy, we store and process all non-personal data we collect in various jurisdictions.

• Personal data: Personal data may be maintained, processed, and stored in the United States, Ireland, South Korea, Taiwan, Israel, and as required for the proper provision of our services and/or by law, in other jurisdictions.

How Long Do We Retain the Data?

Please note that we will retain the collected data as long as necessary to provide our services, comply with our legal and contractual obligations to you, resolve disputes, and enforce our agreements.

We may, at our discretion, correct, supplement, or delete inaccurate or incomplete data at any time.

How Do We Protect the Data?

The hosting service for our digital assets provides us with the online platform through which we offer our services. Your data may be stored through the data storage, databases, and general applications of our hosting provider. They store your data on secure servers behind a firewall and offer secure HTTPS access to most areas of their services.

All payment options provided by us and our hosting provider for our digital assets comply with the PCI-DSS standards (Payment Card Industry Data Security Standards) from the PCI Security Standards Council, which is a collaboration of companies like Visa, MasterCard, American Express, and Discover. PCI-DSS requirements help ensure the secure handling of credit card data (including physical, electronic, and procedural measures) by our shop and service providers.

Despite the measures taken by us and our hosting provider, we cannot guarantee absolute protection or security for the data you upload, publish, or otherwise share with us or others.

Therefore, we ask you to set secure passwords and not share confidential information with us or others, which you believe could significantly or sustainably harm you. Since email and instant messaging are not considered secure communication methods, please do not share confidential information through these channels.

How Do We Handle Minors?

The services are not intended for users who have not reached the legal age of majority. We will not knowingly collect data from children. If you are under the age of majority, you should not download or use the services or provide us with any information.

We reserve the right to request proof of age at any time to verify whether minors are using our services. If we become aware that a minor is using our services, we may deny access to our services and block them, and we may delete all data stored about this user. If you have reason to believe that a minor has provided us with data, please contact us as outlined below.

Use of Your Personal Data

We use your personal data only for the purposes outlined in this Privacy Policy and only if we are convinced that:

• The use of your personal data is necessary to fulfill or enter into a contract (e.g., to provide you with the services themselves or customer support and technical assistance);

• The use of your personal data is necessary to comply with legal or regulatory obligations, or

• The use of your personal data is necessary to support our legitimate business interests (provided that this is always done in a manner that is proportionate and respects your privacy rights).

As an EU resident, you have the right to:

• Request confirmation of whether personal data concerning you is being processed, and access your stored personal data and certain additional information;

• Request that the personal data you have provided to us be delivered in a structured, commonly used, and machine-readable format;

• Request the correction of your personal data stored with us;

• Request the deletion of your personal data;

• Object to the processing of your personal data by us;

• Request the restriction of the processing of your personal data, or

• Lodge a complaint with a supervisory authority.

Please note, however, that these rights are not unlimited and may be subject to our legitimate interests and regulatory requirements. If you have general questions about the personal data we collect and how we use it, please contact us as detailed below.

International Data Transfers

In providing the services, we may transfer data cross-border to affiliated companies or third parties and from your country/jurisdiction to other countries/jurisdictions worldwide. By using the services, you consent to the transfer of your data outside the EEA.

If you are based in the EEA, your personal data will only be transferred to locations outside the EEA if we are confident that an adequate or comparable level of protection for personal data exists. We will take appropriate steps to ensure that we have suitable contractual arrangements with our third parties to ensure that adequate security measures are in place to minimize the risk of unlawful use, alteration, deletion, loss, or theft of your personal data and that these third parties comply with applicable laws at all times.

Rights Under the California Consumer Privacy Act (CCPA)

If you use the services as a California resident, you may have the right under the California Consumer Privacy Act (“CCPA”) to request access to and deletion of your data.

To exercise your right to access and delete your data, please read below for how to contact us.

We do not sell personal data