Privacy Policy

Last updated: [DATE]

1. Introduction

This privacy policy explains how Shelfless SAS ("we", "us", or "our") collects, uses, and protects your personal data when you use Design Wall ("the Service").

We're committed to protecting your privacy and handling your data responsibly. We only collect data that's necessary to provide and improve the Service.

Our details:

• Company name: Shelfless SAS
• SIREN: 891131062
• VAT: FR60891131062
• Address: rte de Sissac, 87300 Peyrat de Bellac, France
• Contact: [support email]

2. What Data We Collect

Data you provide directly:

When you create an account:

• Email address
• Password (stored securely using industry-standard encryption)

When you use the Service:

• Your preferences and settings within Design Wall
• The content you create (canvases, cards, text, images you upload)

When you subscribe to a paid plan:

• Name and country (provided by our payment processor, Paddle)
• We do not store your payment card details—these are held securely by Paddle

Data we collect automatically:

When you use Design Wall:

• IP address
• Device information (browser type, operating system, device type)
• Usage data (which features you use, when you use them, canvas interactions)

We collect this data to:

• Provide and maintain the Service
• Improve user experience
• Identify and fix technical issues
• Understand how the Service is used

3. How We Use Your Data

We use your personal data to:

Provide the Service:

• Create and manage your account
• Store and sync your canvases (for paid plans)
• Authenticate you when you log in
• Process payments (via Paddle)

Communicate with you:

• Send service-related emails (account verification, password resets, payment confirmations)
• Respond to your support requests
• Notify you of important changes to the Service or these policies

Improve the Service:

• Analyse usage patterns to understand how people use Design Wall
• Identify and fix bugs
• Develop new features

Legal obligations:

• Comply with applicable laws and regulations
• Respond to legal requests from authorities

We will never:

• Sell your personal data to third parties
• Use your data for advertising purposes
• Share your data with third parties except as described in this policy

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

Contract: Processing necessary to provide the Service you've signed up for (account management, canvas storage, syncing).

Legitimate interests: Improving the Service, fixing bugs, and ensuring security. We've balanced these interests against your rights and determined they don't override your fundamental rights.

Consent: Where required by law, we'll ask for your explicit consent before processing certain data.

Legal obligation: Complying with laws, regulations, and legal processes.

5. Who We Share Your Data With

We only share your data with trusted third parties who help us provide the Service:

Vercel (hosting provider)

• Purpose: Hosts Design Wall and provides analytics
• Data shared: Usage data, IP addresses, device information
• Location: Global infrastructure (data may be processed outside the EU)
• Privacy policy: https://vercel.com/legal/privacy-policy

Amazon Web Services (AWS) (email service)

• Purpose: Sends service-related emails
• Data shared: Email address, name
• Location: EU and global data centres
• Privacy policy: https://aws.amazon.com/privacy/

Paddle (payment processor)

• Purpose: Processes subscription payments
• Data shared: Name, email, country, payment details
• Location: UK with global infrastructure
• Privacy policy: https://www.paddle.com/legal/privacy

We have agreements in place with these providers to ensure they handle your data securely and only use it for the purposes we've specified.

Legal requirements:

We may disclose your data if required by law, legal process, or government request, or if we believe disclosure is necessary to:

• Comply with applicable laws
• Protect our rights or property
• Prevent fraud or abuse
• Protect the safety of our users or the public

6. International Data Transfers

Design Wall is operated from France, but we use service providers (such as Vercel) with global infrastructure. This means your data may be transferred to and processed in countries outside the European Economic Area (EEA), including countries that may not have the same data protection laws as your country.

When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Service providers certified under relevant data protection frameworks
• Other legally approved transfer mechanisms

7. How Long We Keep Your Data

Active accounts: We retain your data for as long as your account is active and you continue to use Design Wall.

Inactive accounts: If you don't use your account for 12 consecutive months, we'll delete your account and all associated data.

Cancelled subscriptions: If you cancel a paid subscription, your cloud-stored canvases are preserved as read-only for 12 months, then permanently deleted. You can request earlier deletion at any time.

Deleted accounts: When you delete your account (or we delete it due to inactivity), we'll permanently delete your personal data within 30 days, except where we're required by law to retain certain information (such as for tax or accounting purposes).

Backup retention: Deleted data may remain in our backup systems for up to 90 days before being permanently purged.

8. Your Rights Under GDPR

If you're located in the EU, you have the following rights regarding your personal data:

Right of access: You can request a copy of the personal data we hold about you.

Right to rectification: You can ask us to correct inaccurate or incomplete data.

Right to erasure ("right to be forgotten"): You can request that we delete your personal data. We'll comply unless we have a legal obligation to retain it.

Right to restrict processing: You can ask us to limit how we use your data in certain circumstances.

Right to data portability: You can request your data in a machine-readable format (we provide this through our backup/export function).

Right to object: You can object to our processing of your data based on legitimate interests.

Right to withdraw consent: Where we process data based on consent, you can withdraw that consent at any time.

Right to lodge a complaint: You can complain to your local data protection authority if you believe we've mishandled your data. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL): https://www.cnil.fr/

To exercise any of these rights, contact us at [support email]. We'll respond within one month.

9. Data Security

We take security seriously and implement appropriate technical and organisational measures to protect your data, including:

• Encryption of data in transit (HTTPS/TLS)
• Encrypted storage of passwords
• Regular security assessments
• Access controls limiting who can access your data
• Secure infrastructure provided by Vercel and AWS

However, no method of transmission or storage is 100% secure. Whilst we strive to protect your data, we cannot guarantee absolute security.

10. Children's Privacy

Design Wall is not intended for anyone under 18. We don't knowingly collect data from children. If we discover that someone under 18 has created an account, we'll delete it immediately and remove all associated data.

If you believe a child has provided us with personal data, please contact us at [support email].

11. Changes to This Policy

We may update this privacy policy from time to time. If we make significant changes, we'll notify you by email (if you've provided one) or through a notice in Design Wall.

Your continued use of the Service after changes take effect means you accept the updated policy.

12. Contact Us

If you have questions about this privacy policy or how we handle your data, please contact us:

Email: [support email]

Post: Shelfless SAS, rte de Sissac, 87300 Peyrat de Bellac, France