Privacy Policy
Last updated: 2026-08-21 · S.K. Tech Enterprises B.V.
S.K. Tech Enterprises B.V. is the controller for personal data processed via priXoto. This policy explains what we process, why, and your rights (GDPR).
1. What we process
Account: e-mail address, name, language preference, encrypted password (bcrypt hash). Usage: favourites, subscription status. Payment: handled by Stripe — we never see your card details. Technical: security and error logs.
2. Purposes
Providing the service (account, tiers, favourites), payment processing, legal obligations (invoicing/VAT) and — only with separate consent — product updates by e-mail.
3. Processors
Supabase (database, EU region Frankfurt), Stripe (payments), Cloudflare (hosting/CDN/DNS) and our e-mail provider for transactional messages. Data processing agreements apply; storage is primarily in the EU.
4. Retention
Account data is kept as long as your account exists. After deletion we erase your data immediately; invoicing data is kept for the statutory retention period (7 years).
5. Your rights
Access, rectification, export and deletion are self-service via settings → account (export/delete). For other GDPR requests or complaints: [email protected]. You can also lodge a complaint with your data protection authority.
6. Security
Passwords are hashed (bcrypt), traffic is encrypted (TLS), access to production data is restricted and superadmin actions are logged.