Privacy Policy

1. Introduction & Overview

At WISDOM Effect ("we", "our", or "us"), accessible from wisdomeffectapp.com, we take the protection of your personal data seriously. This Privacy Policy outlines how we collect, process, store, and safeguard your personal information in compliance with the General Data Protection Regulation (GDPR) (EU 2016/679) and applicable privacy laws.

2. Data We Collect

We collect only the essential personal data required to provide and improve our puzzle book generation service:

• Account & Contact Data: Email address, hashed password, display name, and profile settings.
• Transaction & Billing Data: Payment customer ID, subscription status, and credit transaction logs. We do not store credit card numbers; all payment transactions are handled securely by our Merchant of Record, Lemon Squeezy.
• User Content: Created puzzle book projects, custom layouts, uploaded fonts, and graphic elements.
• Technical & System Logs: Server access logs, IP addresses, browser agent, and application event logs for security monitoring and error tracing.

3. Legal Basis & Purposes for Data Processing

We process your personal data under the following legal bases under GDPR Article 6:

• Performance of a Contract (Art. 6(1)(b)): To manage your user account, deliver generated puzzle books, process subscriptions, and grant download credits.
• Legitimate Interests (Art. 6(1)(f)): To monitor system performance, prevent fraudulent activities (e.g., disposable email blocking), and improve user experience.
• Legal Obligation (Art. 6(1)(c)): To maintain tax, financial, and business records as required by law.

4. Third-Party Data Processors

We do not sell, rent, or trade your personal data. We share necessary data only with trusted third-party service providers acting as data processors under strict GDPR Data Processing Agreements (DPAs):

5. Your GDPR Rights & How to Exercise Them

As an EU data subject, you hold the following rights regarding your personal data:

• Right to Access & Data Portability (Art. 15 & 20): You can request a copy of your personal data at any time via the "Export My Data" button in your Account Settings.
• Right to Erasure / "Right to be Forgotten" (Art. 17): You can permanently delete your user account and all associated projects and data using the "Delete Account" option in your Account Settings.
• Right to Rectification (Art. 16): You can edit your profile details and display name directly in your Account dashboard.
• Right to Restrict or Object to Processing (Art. 18 & 21): You may object to data processing or request restrictions by contacting support.

6. Cookies & Local Storage

We use essential technical cookies and browser local storage strictly required for user authentication, maintaining active session state, and canvas editor persistence. We do not use intrusive third-party tracking cookies or advertising pixels.

7. Data Retention & Security

We retain your personal data for as long as your account remains active or as needed to provide our services. All data transmissions are encrypted using industry-standard TLS/SSL encryption, and passwords are stored using salted SHA-256 password hashing algorithms.

8. Contact Us & Data Protection Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer at: