This Privacy Policy explains how MyClepsydra collects, uses, shares, and protects personal data when you visit www.myclepsydra.com or use the MyClepsydra service.
1. Data Controller
The data controller is Gabriele Galluzzo, operating MyClepsydra. Questions about this policy or requests concerning your personal data can be sent to gabriele [at] galluzzomarketing [dot] com .
2. Personal Data We Process
We process only the information needed to provide and maintain the service.
Account and purchase information
- Your name and email address received through Stripe Checkout.
- Your account email, payment email, account creation date, and account update date.
- A securely hashed version of your password. We do not store your password in readable form.
- Payment status and transaction-related information supplied by Stripe. MyClepsydra does not receive or store your complete payment-card number.
Notification preferences and delivery history
- Whether milestone notifications are active or paused.
- Your selected year-percentage interval.
- Your preferred delivery time and timezone.
- The last year-percentage milestone for which we notified you.
- Which quotes were delivered to your account and when they were delivered, so that we can avoid unnecessary repetition.
Authentication and account security information
- Authentication session information required to keep you signed in securely.
- Hashed password or email reset tokens and their expiration time. Reset links are valid for one hour.
Technical and aggregate usage information
Our hosting infrastructure may process standard request and security information, such as IP address, browser information, request time, requested page, and error logs. We also use Simple Analytics to understand aggregate page visits and site usage. Simple Analytics is configured without cookies and does not create individual advertising profiles.
3. Where the Data Comes From
- Directly from you when you sign in, change account details, contact us, or update notification preferences.
- From Stripe when you complete a purchase, including the name and email supplied during checkout and the checkout result.
- Automatically from the service when a milestone email is sent, a quote is delivered, or a security-related request is made.
4. Why We Process Personal Data
We process personal data for the following purposes:
- To create and authenticate your account.
- To confirm your purchase and provide lifetime access.
- To schedule and send milestone notifications according to your chosen percentage, time, and timezone.
- To remember which quotes you have received and manage the notification service.
- To process password and email change requests.
- To provide support and respond to privacy requests.
- To secure, maintain, troubleshoot, and understand the aggregate use of the website.
- To meet applicable accounting and legal obligations.
We do not sell personal data and do not use it for third-party advertising.
5. Lawful Bases Under the GDPR
- Performance of a contract: creating your paid account, authenticating you, storing your preferences, and delivering the milestone-email service you purchased.
- Legitimate interests: protecting the service, preventing abuse, troubleshooting errors, providing customer support, and measuring aggregate cookieless website usage. We consider these interests against your rights and freedoms.
- Legal obligations: keeping information when required for tax, accounting, legal, or regulatory purposes.
6. Service Providers and Data Sharing
We disclose personal data only when needed to operate the service or comply with the law. Our principal service providers are:
- Stripe processes checkout and payment information. Stripe handles payment-card details under its own privacy terms.
- Resend processes email addresses and email content to deliver account, security, and milestone emails.
- Railway provides application hosting and associated infrastructure.
- Simple Analytics provides aggregate, cookieless website analytics.
We may also disclose data where required by law, to protect legal rights, or in connection with a sale or transfer of the service.
7. International Data Transfers
Some service providers may process data outside your country or outside the European Economic Area. Where the GDPR requires a transfer safeguard, the transfer is made using an applicable adequacy decision, Standard Contractual Clauses, or another legally recognized mechanism made available by the relevant provider.
8. Cookies and Analytics
MyClepsydra uses essential authentication cookies to sign you in, maintain your session, and protect account access. These cookies are necessary for functionality and are not used for advertising.
Simple Analytics is configured to operate without cookies. It provides aggregate usage information without tracking you across websites or building an individual advertising profile. Because MyClepsydra does not use optional advertising or behavioral tracking cookies, there is no optional-cookie consent banner.
9. Data Retention
- Account details, notification preferences, and quote-delivery history are retained while your account remains active and until the data is no longer needed to provide the service or is deleted following a valid request.
- Password and email reset links expire after one hour. An expired hashed reset token may remain associated with the account until it is replaced or the account is deleted, but it cannot be used after expiration.
- Authentication information is retained until the relevant session expires or is ended.
- Transaction and related records may be retained for the period required by applicable tax, accounting, fraud-prevention, and legal obligations.
- Technical logs are retained according to operational and security needs and the retention settings of our infrastructure providers.
10. Your Data Protection Rights
Subject to the conditions and limitations in applicable law, you may have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data.
- Request restriction of processing.
- Receive data you provided in a portable format.
- Object to processing based on legitimate interests.
- Withdraw consent where consent is the lawful basis, without affecting processing that occurred before withdrawal.
You can pause milestone emails from your profile at any time. To exercise another right, email gabriele [at] galluzzomarketing [dot] com . We may need to verify your identity before completing a request and will normally respond within one month.
You also have the right to lodge a complaint with the data protection authority in the country where you live or work, or where you believe a GDPR infringement occurred.
11. Required Information and Automated Decisions
An email address and the checkout information requested by Stripe are required to purchase and access the service. Notification preferences are required to deliver emails at the requested milestone and local time. If you do not provide this information, we may be unable to create your account or provide the relevant feature.
MyClepsydra does not use personal data to make decisions that produce legal or similarly significant effects through solely automated processing.
12. Security
We use technical and organizational measures intended to protect personal data, including password hashing, expiring reset links, authenticated account access, and access-controlled service infrastructure. No internet service can guarantee absolute security.
13. Children's Privacy
MyClepsydra is not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided personal data to the service, contact us so that we can investigate and delete it where appropriate.
14. Changes to This Policy
We may update this policy when the service, providers, or legal requirements change. The effective date at the top of the page shows when the latest version took effect. Material changes will be communicated through the website or another appropriate channel when required.
15. Contact
For questions, concerns, or data-protection requests, contact:
Gabriele Galluzzo, operating MyClepsydra
Email: gabriele [at] galluzzomarketing [dot] com