Privacy Policy

1. Introduction

Welcome to Illumate UI, operated by Patrik Duch s.r.o. ("Company", "we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using Illumate UI, you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name, and password when you create an account
• Profile Information: Company name, website URL, and preferences
• Payment Information: Billing address and payment details (processed by third-party payment processors)
• Communication Data: Information you provide when contacting us for support
• Feedback: Reviews, comments, and suggestions you submit

2.2 Information Collected Automatically

• Usage Data: Features used and interactions with the Service
• Device Information: Browser type, operating system, device identifiers
• Log Data: IP address, access times, pages viewed, and referring URLs
• Cookies: Session cookies and authentication tokens

2.3 Information from Third Parties

• OAuth Providers: If you sign in using Google or other providers, we receive your name and email

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Create and manage your account
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and customer service requests
• Detect, prevent, and address technical issues and security threats
• Enforce our Terms of Service and protect our legal rights
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your data based on:

• Contract Performance: To provide the Service you requested
• Legitimate Interests: To improve our Service, prevent fraud, and ensure security
• Consent: For marketing communications (which you can withdraw at any time)
• Legal Obligation: To comply with applicable laws

5. Information Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With third parties who perform services on our behalf (hosting, payment processing)
• Legal Requirements: If required by law, regulation, legal process, or governmental request
• Protection of Rights: To protect the rights, property, or safety of Illumate UI, our users, or others
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given us explicit permission

We do not sell your personal information to third parties.

6. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for the Service to function (authentication, security)
• Functional Cookies: Remember your preferences and settings

We do not use any analytics or advertising cookies. You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the Service. For more details, please see our Cookie Policy.

7. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing
• Regular security assessments
• Access controls and authentication

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. After account deletion, we may retain certain data for up to 90 days for backup purposes, and indefinitely for anonymized analytics. We may also retain data as required by law or to protect our legal interests.

Security audit logs may be retained for up to 3 years to protect our legitimate security interests and comply with applicable regulations.

9. Your Rights

Depending on your location, you may have the following rights:

GDPR Rights (EEA Residents)

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limitation of processing
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time

CCPA Rights (California Residents)

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising your rights

To exercise any of these rights, please contact us at privacy@illumateui.app. We will respond within 30 days.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure your data remains protected in accordance with this Privacy Policy.

11. Children's Privacy

The Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we discover that a child under 16 has provided us with personal information, we will delete it promptly.

12. Third-Party Links and Services

The Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We are not responsible for the privacy practices of third-party websites or services. We encourage you to review their privacy policies.

13. AI Processing

We may process certain content you create within the Service using AI models to enhance your experience. AI-assisted features are available depending on your current subscription plan.

All AI processing is performed exclusively on our own infrastructure using self-hosted models. Your data is never sent to third-party AI providers. No user data leaves our infrastructure for AI processing purposes.

When AI-assisted features are available for your subscription plan, you will have the option to opt out at any time through your account settings without affecting the core functionality of the Service.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

If you are in the EEA and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.