Privacy Policy

Who We Are

Alemarde is operated by [Founder name], an individual based in the Republic of Serbia, [address]. This policy explains what personal data we collect, why, and what rights you have. Contact: privacy@alemarde.com.

What We Collect

Business owner data: name, email address, business name, login credentials.
Customer data: name, phone number and/or email address, service date, and any feedback or star rating submitted.
Technical data: our hosting and authentication providers (Vercel and Supabase) automatically log technical data as part of standard infrastructure operation — IP address, browser type, operating system, and access times. We use this only for security and debugging, not for analytics, profiling, or advertising.

Why We Collect It (Legal Basis)

Business owner data is processed to provide the account and service you signed up for (contract performance). Customer data is processed on the business owner's instructions to operate the service on their behalf (contract performance with the owner), and we have a legitimate interest in keeping the service secure and reliable. Technical data is processed under that same legitimate interest.

How We Use It

We use this data to create and manage business accounts, send review requests by email on the business owner's behalf, track delivery, clicks and ratings, and provide support. We do not use customer data for our own marketing, and we do not sell it. We may send business owners service-related notifications (billing, security alerts) and occasional product updates. You can opt out of product updates at any time via the unsubscribe link in those emails.

Who We Share With (Processors)

We share data with the following processors, each under a data processing agreement:

• Supabase (database and authentication) — DPA
• Resend (email delivery) — DPA
• Vercel (hosting) — DPA
• Paddle (payment processing, for paid plans — not yet active) — DPA

We also rely on these processors' own sub-processors, which are listed in their respective DPAs linked above. We do not sell personal data to third parties.

International Transfers

Some of these processors operate outside Serbia and the European Economic Area, including in the United States. Where that happens, we rely on Standard Contractual Clauses or equivalent safeguards recognized under data protection law.

Retention

We keep business owner and customer data for as long as the account is active. If an account is closed, we delete that data within 30 days, except:

• Billing and invoice records, which we keep for 10 years as required by tax and accounting law
• Records we're required to keep longer for other legal reasons

Your Rights

Depending on where you are, you have the right to access the personal data we hold about you, correct it, request its deletion, restrict or object to certain processing, and receive a copy in a portable format. To exercise any of these rights, email privacy@alemarde.com. Business owners can also manage most customer data directly within Alemarde. Deletion requests are handled manually on request; we do not yet have a self-serve deletion tool.

Cookies

Alemarde uses only essential cookies needed to keep you signed in. We do not use tracking, advertising, or analytics cookies.

Children's Privacy

Alemarde is a business tool intended for business owners aged 18 and over. It is not directed at children, and we do not knowingly collect personal data from children.

Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the service before they take effect.

Complaints

You have the right to lodge a complaint with a data protection authority at any time, without first contacting us. In Serbia, this is the Commissioner for Information of Public Importance and Personal Data Protection. If you're in the EU, you can complain to your own country's supervisory authority.

Contact

Questions about this policy or your data? Email privacy@alemarde.com.

See also our Terms of Service.