Privacy Policy
Last Updated: December 3, 2025
This Privacy Policy describes how Olyria Technology LLC (doing business as Ekomspace, "Ekomspace," "We," "Us," or "Our"), located at 8 The Green, Suite B, Dover 19901, Delaware, U.S.A., collects, uses, and discloses Your Personal Information when You use Our Service.
1. Scope and Our Role (Crucial for GDPR)
1.1. Our Role as Data Controller
When You register for an account, subscribe to the Service, or interact with Ekomspace directly (e.g., through marketing or analytics), Ekomspace acts as the Data Controller of Your Personal Information. This includes the data required to manage your subscription.
1.2. Our Role as Data Processor
When You use the Ekomspace platform to operate Your own e-commerce store and Your customers place orders or sign up for Your newsletter, Ekomspace acts as a Data Processor on Your behalf, and You (the User) act as the Data Controller. This relationship is governed by the Data Processing Addendum (DPA) attached to this policy (Section 8).
2. Personal Information We Collect (As Data Controller)
We collect Personal Information about You, our User, through the following means:
- Account/Identity Data: Name, Last Name, Email, Password — to create and manage Your Service account and verify identity. Legal Basis: Contract.
- Billing/Transaction Data: Billing Address, Subscription Level — to process payments and issue invoices. Legal Basis: Contract & Legal Obligation.
- Voluntary Data: Phone Number (optional) — to contact You regarding urgent Service issues or for support. Legal Basis: Legitimate Interest & Consent.
- Usage/Technical Data: IP Address, device information, browser type, pages viewed, time spent on pages — for Service security, stability, and basic operation. Legal Basis: Legitimate Interest.
- Analytics Data: Information collected via Google Analytics (if consented to) — to measure and improve the performance and features of the Service. Legal Basis: Consent.
3. Sharing Your Personal Information
We share Your Personal Information with the following categories of third parties:
- Payment Processors (Stripe): To process subscription fees and billing. Data Location: Global (Secured).
- Hosting Providers (Hetzner, Google Cloud, Supabase): To host the Service and store data. Data Location: Europe (primarily).
- Analytics Providers (Google Analytics): To understand Service usage and trends. Data Location: Global.
- Marketing Pixels (Facebook, Google Ads, TikTok, Snapchat): To measure the effectiveness of advertising campaigns and retargeting. Data Location: Global.
- Legal Compliance: When required by law (subpoena, court order, etc.).
4. International Data Transfers (GDPR Compliance)
Your data is primarily stored on servers in Europe (Hetzner). However, due to the use of global service providers (e.g., Google, Facebook), your Personal Information may be transferred to, and processed in, the United States and other countries outside the European Economic Area (EEA).
When such transfers occur, we rely on legally recognized data transfer mechanisms, including the Standard Contractual Clauses (SCCs) approved by the European Commission, to ensure Your data is afforded the same level of protection as in the EEA.
5. Data Retention and Security
We retain your Personal Information only for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy.
- Account Data: Retained for the duration of Your active account subscription.
- Legal & Financial Data: We retain data necessary to comply with legal obligations (e.g., tax, audit) for up to seven (7) years following the termination of Your account.
- Marketing Data: Retained until You withdraw Your consent.
We implement appropriate technical and organizational measures (e.g., encryption, access controls) to protect Your Personal Data against unauthorized access, disclosure, or destruction.
6. Your Rights Under the GDPR (European Users)
If You are located in the EEA, You have the right to: Access, Rectification, Erasure (Right to be Forgotten), Restriction of Processing, Objection to Processing, Data Portability, and to Withdraw Consent.
To exercise any of these rights, please contact Us at [email protected].
7. Your Rights Under the CCPA/CPRA (California Residents)
7.1. Right to Opt-Out of Sale/Share
You have the right to direct Us not to "sell" or "share" Your Personal Information to third parties at any time. As We share data with advertising partners via pixels, this may be considered a "Sale" or "Sharing" under California law.
DO NOT SELL OR SHARE MY PERSONAL INFORMATION: You can exercise this right by contacting us at [email protected].
7.2. Right to Know and Delete
You also have the right to request information about the Personal Information We collect, disclose, and use, and the right to request deletion of Your Personal Information.
8. Data Processing Addendum (DPA)
This DPA is incorporated into this Privacy Policy and the Terms of Service.
When Ekomspace acts as a Processor of data that You (the User/Controller) upload or collect via Your e-commerce store, Ekomspace agrees to:
- Process the data only on documented instructions from You.
- Ensure that personnel authorized to process the personal data have committed themselves to confidentiality.
- Implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
- Assist You in ensuring compliance with Your GDPR obligations.
- Strict Client Data Confidentiality: Ekomspace shall treat the personal data of Your customers as strictly confidential. We shall not use, share, or sell the personal data of Your customers for Our own purposes.
- Breach Notification: In the event of a Personal Data Breach affecting Your customer data, Ekomspace shall notify You without undue delay.
- Sub-processing: Current Sub-processors include Hetzner (hosting), Google Cloud (storage), Stripe (payment), and Supabase (database).
- Make available to You all information necessary to demonstrate compliance with the GDPR.
9. Contact Us
For any questions about this Privacy Policy or to exercise your rights, please contact Us:
- Email: [email protected]
- Postal Address: Olyria Technology LLC, 8 The Green, Suite B, Dover 19901, Delaware, U.S.A