Privacy Policy

Last updated: [CUSTOMIZE: Effective date]

1. Introduction

[CUSTOMIZE: Company legal name] ("we", "us") operates Dual Canvas. This Privacy Policy explains how we collect, use, disclose, and safeguard your information.

2. Information We Collect

We collect:

Account data: Name, email, password (hashed), profile information
Usage data: Logs, IP address, device info, how you use the Service
Content data: Data you create (projects, tasks, notes, etc.)
Payment data: [CUSTOMIZE: If using Stripe, state that payment data is processed by Stripe per their privacy policy]

3. How We Use Your Information

We use your information to: provide and improve the Service; process payments; send transactional and product communications; enforce our terms; comply with legal obligations; and for analytics and security.

4. Legal Basis (GDPR)

[CUSTOMIZE: If applicable to EU users: We process data based on contract performance, consent, legitimate interests, and legal obligation as applicable.]

5. Sharing and Disclosure

We may share data with: service providers (hosting, analytics, payment); affiliates; when required by law; or with your consent. We do not sell your personal data.

6. Data Retention

[CUSTOMIZE: Retention periods for different data types. E.g. Account data retained until account deletion; logs for X months; etc.]

7. Your Rights

Depending on your location, you may have rights to: access, correct, delete, or port your data; object to or restrict processing; withdraw consent; lodge a complaint with a supervisory authority. Use the export and delete options in Settings, or contact [CUSTOMIZE: privacy contact email].

8. Security

We implement appropriate technical and organizational measures to protect your data. No method of transmission over the Internet is 100% secure.

9. International Transfers

[CUSTOMIZE: If data is transferred outside the EEA, describe safeguards such as Standard Contractual Clauses.]

10. Children

The Service is not intended for users under 18. We do not knowingly collect data from children.

11. Changes

We may update this policy. We will notify you of material changes. The "Last updated" date indicates when changes were last made.

12. Contact

Data protection inquiries: [CUSTOMIZE: privacy/DPO email]. [CUSTOMIZE: If in EU, include DPO and EU representative details.]