Privacy Policy
Introduction
Flart Studio ("Flart Studio", "we", "us", or "our") respects and protects the privacy of visitors to our website, flart.studio, and our customers who use our software ("Software") and services ("Services").
This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Services. By using our Services in any way, you agree to the collection and use of information in accordance with this Privacy Policy, our Terms of Service, and our Software License.
We don't ask for personal information unless we truly need it, and we don't sell personal information to third parties.
Acceptance of Policy
By accessing our website, creating an account, purchasing a subscription, or downloading, installing, or using any Flart Studio software, you automatically and unconditionally agree to this Privacy Policy.
If you do not agree to this Privacy Policy, you must not use our Services.
Information We Collect
We collect various types of information to provide and improve our Services.
Information You Provide
Account Information
- Full name
- Email address
- Password (stored in hashed/encrypted form only)
- Username
Payment Information
- Billing address
- Payment method (e.g., PayPal)
- Company name (if applicable)
- VAT number (if applicable)
- Transaction history
Note: We do not store complete payment card information. Payment processing is handled by PayPal, and we only retain transaction tokens and payment method identifiers necessary for subscription management.
Service Usage Information
- Website URLs where our software is installed
- API Keys and Download Keys
- Subscription and license details
- Software version information
Communication Information
- Support requests and correspondence
- Discord messages (if you contact us via Discord)
- Feedback and survey responses
- Comments on our website
Information Collected Automatically
Log Information
When you access our Services, we automatically collect:
- IP address
- Browser type and version
- Device type and operating system
- Referring website or source
- Pages visited and actions taken
- Date and time of access
- Approximate geographic location (derived from IP address)
- Language and locale settings
License Verification Data
Our software may collect and transmit the following for license validation:
- Domain name where the software is installed
- Server IP address
- API Key or Download Key
- Software version and build number
- Joomla/WordPress/YOOtheme Pro version
- License validation timestamps
This data is essential for verifying license authenticity, preventing unauthorized use, and delivering updates to authorized installations.
Cookies and Tracking Technologies
We use cookies and similar technologies as described in the "Cookies" section below.
How We Use Your Information
We use the information we collect for the following purposes:
Providing Our Services
- Creating and managing your account
- Processing payments and subscriptions
- Delivering software downloads and updates
- Verifying license authenticity
- Enforcing subscription limits
Protecting Our Services
- Detecting and preventing fraud and abuse
- Identifying unauthorized use or distribution
- Enforcing our Terms of Service and Software License
- Protecting against security threats
- Complying with legal obligations
Communicating With You
- Responding to support requests
- Sending important account notifications
- Informing you of security issues
- Notifying you of changes to our Terms, License, or Privacy Policy
- Sending product updates and announcements (with your consent)
Improving Our Services
- Analyzing usage patterns and trends
- Identifying and fixing bugs
- Developing new features
- Improving user experience
- Conducting internal research
Legal Compliance and Enforcement
- Complying with applicable laws and regulations
- Responding to legal requests and court orders
- Enforcing our rights and agreements
- Protecting our intellectual property
- Investigating violations
Legal Basis for Processing (GDPR)
If you are in the European Economic Area (EEA), we process your personal data based on the following legal grounds:
| Purpose | Legal Basis |
|---|---|
| Providing Services | Performance of contract |
| Payment processing | Performance of contract |
| License verification | Legitimate interest (protecting our IP) |
| Security and fraud prevention | Legitimate interest |
| Legal compliance | Legal obligation |
| Marketing communications | Consent |
| Service improvement | Legitimate interest |
You may withdraw consent for marketing communications at any time by following the unsubscribe instructions or contacting us.
Data Retention
We retain your personal information for as long as necessary to:
- Provide our Services to you
- Maintain your account
- Comply with legal obligations
- Resolve disputes
- Enforce our agreements
Retention Periods:
| Data Type | Retention Period |
|---|---|
| Account information | Duration of account + 3 years after deletion |
| Transaction records | 7 years (legal/tax requirements) |
| License verification logs | 3 years |
| Support correspondence | 5 years |
| Server logs | 12 months |
| Cookies | See Cookies section |
When retention periods expire, we securely delete or anonymize the data.
Data Sharing
We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:
Service Providers
We may share information with trusted third-party service providers who assist us in operating our Services:
- Hosting and CDN providers — for website and download delivery
- Payment processors — for processing transactions
- Analytics services — for understanding usage patterns
- Email services — for sending communications
These providers are contractually obligated to protect your information and use it only for the purposes we specify.
Legal Requirements
We may disclose information when required by law, including:
- Response to subpoenas, court orders, or legal process
- Compliance with law enforcement requests
- Protection of our legal rights
- Investigation of potential violations
Terms of Service Violations
If you violate our Terms of Service, Software License, or Acceptable Use Policy, we may:
- Share information with law enforcement
- Disclose information in legal proceedings
- Publish information about the violation (excluding sensitive personal data)
Business Transfers
In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
With Your Consent
We may disclose your personal information for other purposes with your explicit consent.
Third-Party Services
We use the following third-party services that may have access to your information:
PayPal
Payment processor for handling transactions. Privacy Policy: https://www.paypal.com/privacy
Google Analytics
Web analytics service for understanding website traffic. We have IP anonymization enabled. Privacy Policy: https://policies.google.com/privacy
Google Maps
Mapping service for embedded maps on our website. Privacy Policy: https://policies.google.com/privacy
YouTube (Privacy-Enhanced Mode)
Video platform for embedded videos. We use youtube-nocookie.com to minimize tracking. Privacy Policy: https://policies.google.com/privacy
Discord
Communication platform for community support. Privacy Policy: https://discord.com/privacy
These third-party services have their own privacy policies governing their use of your information.
Cookies and Tracking Technologies
What Are Cookies?
Cookies are small text files stored on your device when you visit websites. They help us provide functionality, remember preferences, and understand how you use our Services.
Types of Cookies We Use
Essential Cookies
Required for our Services to function properly:
- Authentication and login status
- Security features
- Session management
Duration: Session or up to 1 year
Functional Cookies
Remember your preferences and choices:
- Language settings
- Display preferences
- Recently viewed items
Duration: Up to 1 year
Analytics Cookies
Help us understand how visitors use our website:
- Pages visited
- Time spent on pages
- Navigation patterns
- Traffic sources
Duration: Up to 2 years
Third-Party Cookies
Third-party services (such as Google Analytics) may set their own cookies. These are governed by their respective privacy policies.
Managing Cookies
You can control cookies through your browser settings:
- Block all cookies
- Block third-party cookies only
- Delete existing cookies
- Set preferences for specific websites
Note: Blocking essential cookies may prevent our Services from functioning properly.
Do Not Track
We currently do not respond to "Do Not Track" browser signals, as there is no consistent industry standard for compliance.
Data Security
We take the security of your information seriously and implement appropriate measures to protect it:
Technical Measures
- SSL/TLS encryption for all data transmission
- Encrypted storage for sensitive data
- Secure password hashing
- Regular security updates and patches
- Firewalls and intrusion detection
Organizational Measures
- Limited access to personal data (need-to-know basis)
- Secure data handling procedures
- Regular security assessments
Data Storage Location
All personal data is stored on encrypted servers located in the European Union (Estonia). We do not store personal data on local computers. Our hosting infrastructure complies with EU data protection standards.
Security Limitations
Despite our efforts, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the security of your account credentials.
Your Rights
Depending on your location, you may have the following rights regarding your personal data:
Access
Request a copy of the personal data we hold about you.
Correction
Request correction of inaccurate or incomplete personal data.
Deletion
Request deletion of your personal data (subject to legal retention requirements).
Restriction
Request restriction of processing of your personal data.
Portability
Request a copy of your data in a structured, machine-readable format.
Objection
Object to processing of your personal data for certain purposes.
Withdraw Consent
Withdraw consent for processing based on consent (e.g., marketing).
Lodge Complaint
Lodge a complaint with your local data protection authority.
How to Exercise Your Rights
To exercise any of these rights, contact us at: https://flart.studio/contacts
We will respond to your request within 30 days. We may request verification of your identity before processing your request.
International Data Transfers
Your information may be transferred to and processed in countries outside your country of residence. Our servers are located in the European Union, which provides strong data protection standards. When data is transferred outside the EU (for example, to third-party service providers), we ensure appropriate safeguards are in place:
- Adequacy decisions by the European Commission
- Standard Contractual Clauses (SCCs)
- Other legally recognized transfer mechanisms
Children's Privacy
Our Services are not intended for children. We do not knowingly collect personal information from anyone under the age of:
- 13 years old (general)
- 16 years old (European Union)
If we discover that we have collected personal information from a child without appropriate consent, we will delete that information immediately.
If you believe a child has provided us with personal information, please contact us immediately.
Links to Other Websites
Our Services may contain links to third-party websites and applications. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.
Embedded Content
Our website may include embedded content from third parties (e.g., YouTube videos, Google Maps). This embedded content behaves as if you visited the third-party website directly:
- They may collect data about you
- They may use cookies
- They may track your interaction
This embedded content is subject to the third party's privacy policy, not ours.
Public Information
Any information you voluntarily share in public areas of our Services becomes public:
- Support center questions and answers
- Discord channel messages
- Comments on our website
Please be careful about sharing personal information in public areas.
Email Communications
Transactional Emails
We send essential emails related to your account and purchases:
- Account creation confirmation
- Purchase receipts
- Password reset requests
- Security notifications
- Important service announcements
You cannot opt out of transactional emails while maintaining an active account.
Marketing Emails
With your consent, we may send:
- Product updates and announcements
- Newsletter
- Promotional offers
You can unsubscribe from marketing emails at any time by:
- Clicking the "unsubscribe" link in any email
- Updating your account preferences
- Contacting us directly
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws.
- Changes are effective immediately upon posting
- The "Last Updated" date will be revised
- Material changes may be communicated via email or website notice
- Continued use after changes constitutes acceptance
We encourage you to review this Privacy Policy periodically.