Privacy Notice

CleanXLIFF is operated by Joana Isabel Rodrigues Polónia (a sole proprietor based in Portugal) (the "controller"). This notice explains what personal data we collect, why we collect it, and your rights.

We collect the following categories of personal data:

• Account data: name, email, password hash, login provider (e.g. Google) — to create and secure your account.
• Usage data: monthly file counter, processing history (file names and sizes you opt-in to keep) — to enforce plan limits and show you your history.
• Technical data: IP address, device/browser identifiers, error logs — for security and to keep the service running.
• Billing data: handled exclusively by Paddle (our Merchant of Record). We never see your payment card details.

To provide and secure the service, enforce plan limits, fulfil contracts, prevent fraud and abuse, comply with legal obligations and improve the product. The legal bases are contract performance, legitimate interests and, where required, your consent.

We share data only with the following categories of recipients:

• service providers and subprocessors (hosting, authentication, analytics, error tracking) acting under our instructions;
• Paddle.com Market Limited, our Merchant of Record, for payment processing, subscription management, tax compliance and invoicing;
• professional advisers (legal, accounting) where strictly necessary;
• competent authorities where required by law.

Some of our subprocessors are located outside the EEA/UK. When that's the case, transfers are protected by Standard Contractual Clauses or an adequacy decision.

We keep account data while your account is active and for a short period afterwards (up to 90 days) to handle disputes, fraud and legal obligations. Billing records are kept for the period required by tax law (typically up to 10 years). You can delete your processing history at any time from the History page.

Depending on your country, you have the rights to access, rectify, erase, restrict and port your personal data, to object to processing and to withdraw consent. EU/UK users also have the right to complain to their local supervisory authority.

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls and regular security reviews. No system is 100% secure, so we encourage you to use a strong unique password.

Privacy questions or requests? Email hello@cleanxliff.com and we'll respond within 24 hours.