Privacy Policy

1. Introduction

Van Moose ("we," "our," or "us") operates the Repetix subscription tracking service ("Service"). This Privacy Policy describes how we collect, use, and protect your personal information when you use our Service.

We are committed to protecting your privacy and ensuring transparency in our data practices. This policy complies with the General Data Protection Regulation (GDPR) and other applicable privacy laws.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name (via Google OAuth)
• Subscription Data: Subscription names, costs, billing cycles, and payment dates you manually enter
• Payment Information: Processed securely by Stripe (we do not store credit card details)
• Communications: Messages you send to our support team

2.2 Information Automatically Collected

• Usage Data: Pages visited, features used, time spent in the application
• Device Information: Browser type, operating system, IP address
• Cookies: Authentication tokens and user preferences

3. How We Use Your Information

We use your personal information to:

• Provide the Service: Enable subscription tracking and management features
• Account Management: Create and manage your account, process payments
• Communications: Send service updates, billing notifications, and respond to support requests
• Improve the Service: Analyze usage patterns to enhance functionality and user experience
• Legal Compliance: Comply with applicable laws and regulations

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

• Contract Performance: To provide the subscription tracking service you've signed up for
• Legitimate Interest: To improve our service, ensure security, and communicate with you
• Consent: For marketing communications (where applicable)
• Legal Obligation: To comply with tax and regulatory requirements

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

5.1 Service Providers

• Stripe: Payment processing (subject to Stripe's privacy policy)
• Google: Authentication services (subject to Google's privacy policy)
• Vercel: Hosting and infrastructure services
• Supabase: Database hosting services

5.2 Legal Requirements

We may disclose your information if required by law, court order, or to protect our rights and safety.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data is encrypted in transit and at rest
• Access Controls: Limited access to personal data on a need-to-know basis
• Regular Updates: Security patches and updates are applied promptly
• Monitoring: Continuous monitoring for security threats

7. Data Retention

We retain your personal information for as long as necessary to provide the Service and comply with legal obligations:

• Account Data: Retained while your account is active
• Subscription Data: Retained while your account is active
• Payment Records: Retained for 7 years for tax and accounting purposes
• Usage Data: Anonymized after 2 years

8. Your Rights (GDPR)

Under GDPR, you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your personal data
• Restriction: Limit how we process your data
• Portability: Receive your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at info (at) repetix.com.

9. International Data Transfers

Your data may be processed in countries outside the European Economic Area (EEA). We ensure adequate protection through:

• Standard Contractual Clauses with service providers
• Adequacy decisions by the European Commission
• Appropriate safeguards as required by GDPR

10. Cookies and Tracking

We use essential cookies for authentication and user preferences. We do not use tracking cookies for advertising purposes. You can control cookies through your browser settings.

11. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the Service. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Supervisory Authority

You have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) if you believe we have not handled your personal data in accordance with applicable law.