Privacy Policy
1. Controller
The controller responsible for data processing on this website is:
SOVRAN DIGITAL LTD
182-184 High Street North, East Ham, London, E6 2JA, United Kingdom
Email: info@sovrandigital.co.uk
2. Collection and Processing of Personal Data
a) Upon registration: username, email address, password (encrypted). Purpose: performance of contract (Art. 6 (1) (b) GDPR).
b) When using the service: created short links, bio pages, QR codes, settings.
c) When bio pages and short links are accessed: IP address (truncated), date/time, country, browser, operating system, referrer. Purpose: provision and statistics (Art. 6 (1) (f) GDPR).
d) Upon payment: billing data, processed by our payment service provider Stripe (see section 6).
3. Cookies and Consent
We use technically necessary cookies (session, login, security) on the basis of § 25 (2) TDDDG. Optional cookies (statistics, marketing) are only set with your consent (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). You may revoke your consent at any time via “Cookie Settings†in the footer.
4. Hosting
This website is operated on servers within the European Union. A data processing agreement pursuant to Art. 28 GDPR exists with the hosting provider.
5. AI Features (AI Copilot)
When using the AI features (slug suggestions, bio drafts, statistics insights), the text inputs you enter (prompts) are transmitted to the API of our provider DeepSeek (Beta Intelligence Pte. Ltd., Singapore) in order to generate responses. Only prompts and necessary context data (e.g. link statistics in anonymized form) are transmitted. Legal basis: Art. 6 (1) (b) GDPR. Data transfer to Singapore is secured by standard contractual clauses of the EU Commission. The use of AI features is optional.
6. Payment Processing (Stripe)
Payments are processed by Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. Stripe privacy notice: https://stripe.com/privacy. Payment data (card number, validity, billing address) is processed exclusively by Stripe; we only receive payment confirmation. Legal basis: Art. 6 (1) (b) GDPR.
7. Email Delivery
We use our own SMTP server in the EU for transactional emails (registration, password reset, invoices). Legal basis: Art. 6 (1) (b) and (f) GDPR.
8. Retention Period
Personal data is stored only as long as necessary for the performance of the contract or as long as statutory retention obligations exist. After the end of the contract, we delete your data unless legal obligations (e.g. commercial and tax retention periods of 6-10 years) prevent this. Statistics data is anonymized or deleted after 12 months.
9. Recipients and Processors
Your data will not be disclosed to third parties, except: to processors (hosting, payment provider Stripe, AI provider DeepSeek), for legal enforcement (Art. 6 (1) (c) GDPR) or as far as you have expressly consented.
10. Third-Country Transfer
When using Stripe and the AI features (DeepSeek), data may be transferred to third countries. These transfers are based on standard contractual clauses of the EU Commission or the EU-US Data Privacy Framework.
11. Your Rights as a Data Subject
You have the right to:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdrawal of consent (Art. 7 (3) GDPR)
To exercise your rights, an email to info@sovrandigital.co.uk is sufficient.
12. Right to Complain
You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). Supervisory authority for the provider: Information Commissioner's Office (ICO), Registration Number ZC142403, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, United Kingdom, https://ico.org.uk.
13. Data Security
We use TLS encryption (HTTPS), password hashing and access controls. However, complete security of data transmission on the internet cannot be guaranteed.
14. Changes
We may adapt this privacy policy. The current version can be found at this address.