Privacy Policy

1. The short version

We collect as little as we can to make the product work and bill you. We do not sell your data. We do not show third-party ads inside paid subscriptions. We do not use your data to train AI models.

2. What we collect

• Account data (email, optional name) — only when you create an account or subscribe.
• Subscription / billing data (the minimal data passed by your payment processor: country, currency, last-4 of card) — handled by our Merchant of Record (Polar.sh). We never see your full card.
• Usage data — anonymous counts of which features you use, error logs (no payload bodies). Used to fix bugs and prioritize features.
• Device data — for iOS apps: device model, iOS version, app version, locale. Used for crash diagnostics and compatibility.
• What we DO NOT collect: your contact lists, photos, location, microphone, camera, or any payload you paste into our tools (JSON, regex, colors, etc. all stay on your device unless you explicitly save them to your account).

3. Why we collect it

• To deliver the service you paid for (account, sync, support).
• To process payment (your country determines applicable VAT/sales tax; the Merchant of Record handles this).
• To diagnose issues (error logs).
• To meet legal obligations (invoices, tax records).

4. Where data lives

Servers in the EU (Germany, Cyprus). No transfers to jurisdictions without adequacy or SCC coverage. Static assets via Cloudflare's global CDN.

5. Third parties we use

• Polar.sh (Merchant of Record) — payment processing.
• NOWPayments (optional) — crypto checkout if you choose it.
• Cloudflare — CDN, DNS, DDoS protection.
• Apple App Store Connect — for iOS apps: purchase verification, subscription management.
• Each has its own privacy policy and is GDPR/CCPA compliant.

6. Your rights

Under GDPR / CCPA / similar laws you have the right to:

• Access the data we hold about you.
• Export it in a portable format.
• Correct it.
• Delete it (we may keep invoice records the law requires us to keep — usually 7 years).
• Object to processing.
• Lodge a complaint with your local data protection authority.

To exercise any of these, email support@bestpaid.app. We respond within 30 days.

7. Children

Services are not directed to anyone under 16. We don't knowingly collect data from children. If you believe we have, email us and we'll delete it.

8. Cookies & tracking

Our websites use one essential cookie (session). No analytics cookies, no tracking pixels, no third-party scripts that profile you. iOS apps use Apple's standard frameworks — no third-party SDKs that track across apps.

9. Subscription auto-renew

Subscriptions auto-renew at the end of each period unless you cancel at least 24 hours before. For iOS apps, manage subscriptions in Settings → Apple ID → Subscriptions. For web subscriptions, manage in your account page.

10. Changes

If we materially change this policy, we'll email subscribers and post a notice on the home page at least 30 days before it takes effect.

11. Contact

Operator: BestPaid (Cyprus).
Contact: support@bestpaid.app