Privacy Policy

Last updated: January 20, 2025

1. Introduction

A-Line Services ("we", "us", or "our"), operating as a sole proprietorship under Belgian law, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SquarePic service ("Service"). This policy complies with the EU General Data Protection Regulation (GDPR) and Belgian data protection laws.

Data Controller:

  • A-Line Services
  • Arthur De Witte
  • VAT: BE0789776671
  • Address: Terweeenstraat 13, 9630 Munkzwalm, Oost-Vlaanderen, Belgium
  • Email: support@a-line.be

2. Information We Collect

2.1 Personal Information

We collect the following personal information:

  • Email Address: Required for account creation, authentication, and communication
  • Payment Information: Processed securely through Stripe (we do not store credit card details)
  • Transaction Records: Purchase history (lifetime purchases), subscription status, payment status, and timestamps
  • Subscription Data: For Pro subscribers: subscription tier, billing cycle, subscription ID, and status (active, canceled, expired)
  • Usage Data: We track the number of images you process to determine refund eligibility. Users who have processed 10 or fewer images are eligible for refunds according to our Refund Policy. This data is stored securely and used solely for this purpose.

2.2 Technical Information

We automatically collect:

  • IP address and device information (for security and fraud prevention)
  • Browser type and version
  • Access times and referring website addresses

2.3 Analytics and Monitoring

We use the following third-party services:

  • Plausible Analytics: Privacy-friendly analytics that does not use cookies and does not track individuals. Data is anonymized and aggregated. See Plausible's privacy policy.
  • Sentry: Error tracking and performance monitoring to improve service reliability. Only technical error information is collected. See Sentry's privacy policy.

2.4 Image Data

Important: We do not store your images. All image processing is performed locally in your browser. Your images never leave your device and are never uploaded to our servers.

2.5 Cloud Sync Data (Pro Subscribers Only)

If you have an active Pro subscription, we store your application settings in the cloud to enable multi-device synchronization:

  • Settings Data: All your application preferences including blur intensity, output size, background patterns, watermark settings, and margins
  • Device ID: A randomly generated identifier to distinguish between your devices (stored locally in your browser)
  • Sync Metadata: Last sync timestamp and version numbers to prevent conflicts

Data Retention: Settings data is retained for 6 months after your Pro subscription expires or is canceled, allowing you to reactivate your subscription and recover your settings. After 6 months, cloud settings are automatically deleted. Your account and transaction history are retained separately according to our standard retention policies.

3. How We Use Your Information

We use your information for:

  • Providing and maintaining the Service
  • Processing payments and managing your account
  • Managing subscriptions, including renewals, cancellations, and access control
  • Synchronizing your settings across devices (Pro subscribers only)
  • Sending authentication emails (magic links)
  • Sending transactional emails (purchase confirmations, receipts, subscription notifications)
  • Responding to your requests and support inquiries
  • Tracking image processing usage to determine refund eligibility
  • Detecting and preventing fraud or security issues
  • Improving our Service through analytics
  • Complying with legal obligations

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

  • Contract Performance: Processing necessary to provide the Service you purchased
  • Legal Obligation: Compliance with tax, accounting, and other legal requirements
  • Legitimate Interests: Fraud prevention, service improvement, and security
  • Consent: Where you have provided explicit consent (which you may withdraw at any time)

5. Data Sharing and Disclosure

We share your information only with:

  • Stripe: Payment processing (see Stripe's privacy policy)
  • Plausible Analytics: Anonymous, aggregated analytics data only
  • Sentry: Technical error information for service improvement

We do not:

  • Sell your personal information to third parties
  • Share your data for marketing purposes
  • Transfer data outside the EU without adequate safeguards

6. Data Storage and Security

6.1 Storage Location

Your data is stored on servers located in the European Union (primarily Germany via Hetzner). In the future, we may migrate between data centers within the EU as our infrastructure evolves (e.g., Kubernetes clusters). We will notify users of any significant changes to data location.

6.2 Data Retention

We retain your personal information:

  • Account Data: Permanently while your account is active, or until you request deletion
  • Transaction Records: For 7 years as required by Belgian tax law (including purchases and subscription payments)
  • Cloud Settings Data: For Pro subscribers: retained for 6 months after subscription expiration or cancellation to allow reactivation. After 6 months, cloud settings are automatically and permanently deleted. You can manually delete your cloud settings at any time from your account settings.
  • Subscription Data: Active subscription information retained while subscription is active. Historical subscription records retained for 7 years for tax compliance.
  • Analytics Data: Aggregated data retained indefinitely (cannot be linked to individuals)

6.3 Security Measures

We implement industry-standard security measures:

  • Encrypted data transmission (HTTPS/TLS)
  • Secure password handling (never stored in plain text)
  • Rate limiting to prevent abuse
  • Regular security audits and updates
  • Restricted access to personal data

7. Your Rights Under GDPR

As an EU resident, you have the following rights:

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Correct inaccurate or incomplete data
  • Right to Erasure: Request deletion of your data ("right to be forgotten")
  • Right to Restriction: Limit how we use your data
  • Right to Data Portability: Receive your data in a machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time (where applicable)

To exercise any of these rights, contact us at support@a-line.be. We will respond within 30 days. You can download your data directly from your account by clicking the download button in the app header.

8. Cookies and Tracking

We use minimal cookies:

  • Essential Cookies: Required for authentication (JWT tokens stored in localStorage)
  • Analytics: Plausible Analytics does not use cookies
  • No Tracking: We do not use advertising or third-party tracking cookies

For more details, see our Cookie Policy.

9. Children's Privacy

Our Service is not directed to children under 16. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. International Data Transfers

Your data is processed within the EU. If we use service providers outside the EU, we ensure adequate safeguards through:

  • Standard Contractual Clauses (SCCs) approved by the EU Commission
  • Adequacy decisions for certain countries
  • Other legally recognized transfer mechanisms

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

  • Posting the new policy on this page
  • Updating the "Last updated" date
  • Sending an email notification for material changes

Your continued use of the Service after changes constitute acceptance of the updated policy.

12. Contact Us & Complaints

For questions about this Privacy Policy or to exercise your rights, contact:

  • Email: support@a-line.be
  • Mail: A-Line Services, Terweeenstraat 13, 9630 Munkzwalm, Belgium

If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with:

  • Belgian Data Protection Authority (APD/GBA)
  • Website: www.dataprotectionauthority.be
  • Email: contact@apd-gba.be