DRAFT — placeholder for legal review. Not yet binding.

Privacy Policy

This policy explains what Krixel collects and why. We aim to collect as little as possible (GDPR-aware).

Data controller

The data controller is ACE TM Ltd. (ЕЙС ТМ ЕООД, company No. 175191385), 11 Ekaterina Simidchiyska St., Sofia, Bulgaria. For data questions or to exercise your rights, email karaivanov@ace-tm.com.

What we store

• Account: your email, and optionally name and company.
• Billing: order records from our payment provider (no card data).
• Licensing: a hash of your license key and the machines you activate (a device fingerprint, name and OS) to enforce seat limits.

Your images stay local

Image processing happens entirely on your computer. We never receive, upload or store the images you process.

Processors

We use Supabase (database/auth), our payment Merchant of Record, and an email provider for transactional messages. Each processes data only to provide the service.

Retention

Account data is kept while your account is active. Order records are kept for up to 10 years as required by accounting and tax law, then deleted or anonymised.

Your rights

You have the right to access, rectify, erase, restrict and port your data, and to lodge a complaint with the Bulgarian Data Protection Authority (CPDP). Contact us at any time.