Privacy Policy

1. Who we are

Albundle ("we", "us") is operated by FRANCISCO MIGUEL COSTA IGREJA ("the seller"), acting as the data controller for personal data processed through the Albundle service ("Service") available at albundle.com.

2. Personal data we collect

• Account data: name, email address, authentication identifiers.
• Content data: projects, tracks, tasks, notes, files, and contacts you upload.
• Usage and telemetry: pages visited, feature interactions, device and browser information, IP address.
• Support communications: messages you send us.
• Billing metadata: subscription status and plan (payment card data is processed by Paddle, not stored by us).

3. Why we process it (purposes and legal bases)

• Creating and running your account — contract performance.
• Providing the release-management features you use — contract performance.
• Security, fraud prevention, and abuse detection — legitimate interests.
• Service improvement and analytics — legitimate interests.
• Customer support — contract performance and legitimate interests.
• Product updates and marketing emails — consent, revocable at any time.
• Legal, tax, and accounting obligations — legal obligation.

4. Sharing with third parties

We share personal data only with the following categories of recipients:

• Paddle.com Market Limited, our Merchant of Record for all sales — for payment processing, subscription management, invoicing, and tax compliance.
• Infrastructure providers (hosting, database, storage, email delivery) acting as processors under written agreements.
• Analytics and support tooling used to operate the Service.
• Professional advisors (legal, accounting) where necessary.
• Public authorities where required by law.

5. International transfers

Some processors are located outside the EEA/UK. Where personal data is transferred internationally, we rely on adequacy decisions or Standard Contractual Clauses as appropriate safeguards.

6. Retention

We keep account and content data for as long as your account is active. When you delete your account, we delete or anonymise your personal data within 90 days, except where longer retention is required by law (e.g. tax and accounting records).

7. Your rights

You have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent at any time. EEA/UK users also have the right to lodge a complaint with their supervisory authority. We aim to respond within one month.

8. Security

We apply appropriate technical and organisational measures — including encryption in transit, access controls, and row-level security — to protect personal data against unauthorised access, loss, or alteration.

9. Cookies

We use strictly necessary cookies to keep you signed in and to remember your preferences, and limited analytics cookies to understand how the Service is used. You can control cookies through your browser settings.

10. Contact

To exercise your rights or ask a privacy question, contact us at geral@albundle.com.