Privacy policy.

Spendsquare Limited ("Spendsquare," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our online motivational and organizational tools, including our websites (e.g., www.motifications.com), mobile applications, and desktop applications (collectively, the "Service"). By using the Service, you agree to the terms of this Privacy Policy.

We collect the following categories of information:

• Account Information: When you register for an account ("Account"), we collect your full name, email address, date of birth, and other information you provide (e.g., gender, profile picture).

• Usage Data: We automatically collect information about your use of the Service, including your IP address, browser type, operating system, device identifiers, access times, pages viewed, and referring website addresses.

• We collect and store the content you create, share, and interact with within the Service, including quotes, plans, titles, descriptions, comments, and any other information you choose to include.

• Payment Information: If you subscribe to our paid services, we collect payment information, such as your payment card details, through secure payment processing services. We do not store full credit card numbers on our servers.

• Customer Support Information: When you contact our customer support team, we collect the information you provide, including your contact details and a description of your issue.

• Device Information: We collect information about the devices you use to access the Service, including the type of device, connection type, and settings.

• Cookies and Similar Technologies: We use cookies and similar technologies to track your activity on the Service, personalise your experience, and collect information about how you use the Service. For more information, please see our Cookie Policy.

We use your information for the following purposes:

• Providing and maintaining the Service: To provide, operate, and maintain the Service; to process transactions; to authenticate your access; and to provide customer support. (Legal Basis: Contract performance)

• Personalisation: To personalise your experience on the Service and provide you with relevant recommendations and notifications. (Legal Basis: Legitimate interests in improving user experience and engagement)

• Communication: To send you transactional emails, service updates, security alerts, and administrative messages. (Legal Basis: Contract performance and legitimate interests in providing important information)

• Security: To monitor and prevent fraud, identify violations of our policies, and protect the security of the Service. (Legal Basis: Legitimate interests in protecting our service and users from fraud and security threats)

• Direct Marketing (with your consent): To send you information about new features, promotions, and other news related to the Service. You can opt out of these communications at any time. (Legal Basis: Consent)

• Customer Support: To respond to your inquiries and provide technical assistance. (Legal Basis: Consent and contract performance)

We process your personal data based on the following legal grounds:

• Contract Performance: Processing is necessary to perform our contractual obligations to you, such as providing the Service.

• Legitimate Interests: Processing is necessary for our legitimate interests, such as improving the Service, preventing fraud, and ensuring security, provided these interests are not overridden by your fundamental rights and freedoms.

• Consent: We may process your data based on your consent for specific purposes, such as direct marketing. You can withdraw your consent at any time.

We may share your information with the following categories of recipients:

• Service Providers: We share information with third-party service providers who assist us in providing the Service, such as payment processors, data hosting providers, and customer support platforms. These providers are contractually obligated to protect your information.

• Other Users: Some features of the Service allow you to share information with other users. You control what information is shared through your privacy settings.

• Legal Authorities: We may disclose your information to legal authorities if required by law or legal process, or if we believe in good faith that such disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or comply with a judicial proceeding, court order, or legal process served on us.

Your Personal Data may, throughout the course of its processing, be transferred outside of the European Economic Area (EEA). We use data hosting service providers in the United States to host the information we collect, and we use technical measures to secure your data.

For our data-processors based in the U.S. we ensure that these processors are part of the EU-U.S. and Swiss-U.S. Privacy Shield Framework. For further information please see: www.privacyshield.gov.

Data Processors

• Amazon Web Services Inc. - We are using AWS, as an infrastructure as a service provider.

• Google Inc. - We are using Google Cloud, as an infrastructure as a service provider.

We implement appropriate technical and organisational measures to protect your personal information from unauthorised access, use, disclosure, alteration, or destruction. These measures include:

• Encryption: We use encryption to protect your data both in transit and at rest.

• Access Controls: We restrict access to your personal information to authorised personnel who have a legitimate need to access it.

• Network Security: We utilise isolated networks and Virtual Private Clouds (VPCs) to segment our infrastructure and enhance security. This helps to restrict access to sensitive data and minimise the impact of potential security breaches.

• Security Assessments: We regularly conduct security assessments and vulnerability scans to identify and mitigate potential security risks.

• Intrusion Detection and Prevention: We use intrusion detection and prevention systems to monitor for and prevent unauthorised access to our systems.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Specific retention periods include:

• Account Information: Retained for 30 days following account deletion.

• Customer Support Information: Retained for 12 months following the resolution of the issue.

• Usage Data: Retained for 24 months for analytics and service improvement purposes.

• Payment Information: Retained as required by payment processors and applicable law.

You have the following rights in relation to your personal information:

• Right to Access: You have the right to request access to your personal information and to obtain information about how we process it.

• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information.

• Right to Erasure ("Right to be Forgotten"): You have the right to request deletion of your personal information under certain circumstances.

• Right to Restriction of Processing: You have the right to restrict the processing of your personal information under certain circumstances.

• Right to Data Portability: You have the right to receive your personal information in a structured, commonly used, and machine-readable format and to transmit it to another controller.

• Right to Object: You have the right to object to the processing of your personal information under certain circumstances.

To exercise any of these rights, please contact us at data@motifications.com.

We use cookies and similar technologies to collect information about your activity on the Service. This information helps us personalise your experience, analyse usage patterns, and improve the Service. You can manage your cookie preferences through your browser settings. For more details, please see our Cookie Policy.

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under this age. If you become aware that a child has provided us with personal information without parental consent, please contact us.

The Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read the privacy policies of any third-party websites you visit.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by email.

If you have any questions or concerns about this Privacy Policy, please contact us at: data@motifications.com.

In case you would not agree with our response or action or if you consider that your rights have been infringed, you have the possibility to lodge your complaint with the Information Commissioners Office (address: Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF, web: www.ico.org.uk.