Privacy Policy

1. Overview

Osiris7 respects your privacy. This policy explains how we collect, use, and protect your personal data.

2. What Data Do We Collect?

• Full name
• Email address
• IP address
• Payment data (via Stripe - we do not store card numbers)
• Order history and transaction records

3. How Do We Use Your Data?

• To process your payments
• To send email confirmations
• To improve our services
• To prevent fraud
• To comply with legal obligations (taxes)

4. Stripe (Payment Processor)

All payments are processed through Stripe, Inc. Your card data is never stored on our servers. Stripe is certified as a PCI DSS Level 1 service provider.

For more information, see Stripe's Privacy Policy.

5. How Long Do We Keep Your Data?

• Account data: until the account is active
• Payment data: 7-10 years (for tax purposes)
• Archived data: anonymized and kept for statistics

6. Your Rights Under GDPR

• ✅ Right to access your data
• ✅ Right to correct inaccurate data
• ✅ Right to request deletion of your data
• ✅ Right to data portability
• ✅ Right to object to processing

7. Cookies

We use cookies for authentication, security, and analytics. You can manage cookie preferences in your dashboard.

8. Security

We use advanced security measures: SSL/TLS encryption, RLS in database, and Stripe for payment processing.

9. Changes to This Policy

We may update this policy from time to time. Important changes will be notified via email.

10. Data Transfers (GDPR)

Data may be processed by third-party providers including Stripe, email providers, analytics services, and cloud infrastructure providers. These providers may process data outside the European Economic Area under appropriate safeguards.

11. Subprocessors

Third-party processors may include:

• Stripe (payments) - Greece
• Supabase (database & storage)
• Resend (email)
• Vercel (hosting)
• Cloudflare (security & CDN)

These providers process data only to provide the service.

12. Contact

For privacy-related questions, please visit our Contact Page.