Privacy Policy
Last updated: 2026-10-14
Template — not legal advice. Adjust it to the data you actually collect.
Controller
SIA "Markrip Labs" (registration number 40203725109), Krāslavas iela 7-12, Rīga, LV-1003, Latvia. Contact: markriplabs@gmail.com.
What we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Email address, name | Account and sign-in | Contract |
| Session data (IP address, browser) | Security and fraud prevention | Legitimate interest |
| Purchase records | Providing paid features | Contract |
| Ghost site URL, title, logo, accent colour | Connecting your site and designing cards | Contract |
| Ghost Admin API key (stored encrypted) | Reading posts, uploading cards, setting social images | Contract |
| Post titles and author names | Rendering the card for each post | Contract |
We read only the posts we add cards to and never copy post content. Generated images are uploaded to your own Ghost site. Disconnecting deletes the stored key and removes our webhook from your site.
Payment details are collected and processed by Paddle as Merchant of Record; we never see your card number.
Processors
- Vercel (hosting) — USA/EU
- Neon (database) — EU (Frankfurt)
- Resend (email delivery) — USA
- Paddle (payments) — UK/EU
- Google (only if you choose Google sign-in)
International transfers rely on Standard Contractual Clauses or adequacy decisions.
Retention
Account data is kept while your account exists. Deleting your account removes it, except records we must keep for legal or tax reasons.
Your rights
You can access, correct, export or delete your data, object to processing, and complain to your data protection authority. Email markriplabs@gmail.com.
Cookies
We use only strictly necessary cookies (sign-in session). We don't use advertising cookies.