Last updated: 30 September 2025
This Privacy Policy explains how Шейп Стайл ЕООД (Shape Style EOOD), trading as Linxlay ("Linxlay", "we", "us"), processes personal data when you use the Linxlay web application (the "Service").
Controller: Шейп Стайл ЕООД (Shape Style EOOD)
ЕИК: 205582656 • ДДС №: BG205582656
Address: ул. Комсомолец 16, гр. Брезник 2360, България
Email: linxlayapp@gmail.com
This Policy explains how we process personal data when you use the Linxlay web application (the "Service") at linxlay.com and related sub-domains.
This Policy applies to linxlay.com, related sub-domains, and any future mobile versions or in-app experiences. It covers visitors and registered users worldwide.
| Category | Examples | Purpose | Legal basis |
|---|---|---|---|
| Account data | Email, username, hashed password, profile image (optional) | Create & secure your account; authentication; service communications | Contract (Art. 6(1)(b) GDPR) |
| Media & metadata | Images you upload; generated thumbnails/crops; grid positions; visibility/pin flags | Provide grid-planning features (upload, arrange, export) | Contract |
| Subscription & billing | Stripe customer/subscription IDs; plan; country; VAT ID; card brand + last4 (from Stripe) | Provide paid features; invoicing; tax compliance; fraud prevention | Contract & Legal obligation (Art. 6(1)(c)) |
| Usage & diagnostics | Device & browser info, IP address, request IDs, error events, performance metrics | Keep the Service reliable and secure; debug issues; combat abuse | Legitimate interests (Art. 6(1)(f)) - balanced against your rights |
| Marketing (optional) | Email (newsletter, only if you sign up) | Product news & updates | Consent (Art. 6(1)(a)) |
We do not require your phone number, gender, date of birth, or postal address to use the Service.
We do not knowingly collect data from children under 16. Do not use the Service if you are under that age.
You can also use industry opt-outs (they don't override our consent tool but are provided for transparency): EDAA/YourOnlineChoices, NAI, DAA/AdChoices.
We share data with vetted processors acting on our instructions:
| Purpose | Provider | Primary location |
|---|---|---|
| Cloud runtime/hosting | Replit | USA |
| Postgres database | Neon | EU (Amsterdam) |
| Object storage & CDN | Supabase | EU (Frankfurt) |
| Payments & billing | Stripe | EU (Ireland) & USA |
| Transactional email | Resend | USA |
| Error tracking | Sentry | EU (Frankfurt) |
| Product analytics (cookieless) | Plausible | EU (Germany) |
| Analytics/Tag Manager | EU (Ireland) & USA | |
| Ads/measurement | Meta | EU (Ireland) & USA |
We may disclose data to comply with law or protect rights, safety, and the Service.
If personal data is transferred outside the EEA/UK, we rely on SCCs and/or an adequacy decision. Copies available on request.
Safeguards include TLS, private storage with time-limited signed URLs, database Row-Level Security (RLS), access controls, rate limiting, and monitoring. No system is perfectly secure - please protect your credentials. Report issues: linxlayapp@gmail.com
You can access, rectify, erase, export (portability), or restrict your data, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time (does not affect prior lawful processing).
Contact: linxlayapp@gmail.com
We may request information to verify your identity and aim to respond within 30 days.
For US residents (e.g., California): if you opt in to Marketing, we may process data for "cross-context behavioral advertising" (e.g., via Meta Pixel/Google Ads). Where applicable, you have the right to opt out of "sale"/"sharing." Use the link to disable Marketing. We honor Global Privacy Control (GPC) signals where required.
References to third-party platforms (e.g., Instagram/Meta) or sites are governed by their own policies.
Not intended for children under 16. If you believe we collected data from a child under 16, contact us to delete it.
We do not engage in automated decision-making that produces legal or similarly significant effects.
We may update this Policy. We'll post changes here and notify registered users at least 14 days before they take effect.
Шейп Стайл ЕООД (Shape Style EOOD)
ул. Комсомолец 16, гр. Брезник 2360, България
linxlayapp@gmail.com