Privacy Policy

Last Updated: January 8, 2025

1. Introduction

1.1 This Privacy Policy ("Policy") describes how Clean Feed ("we," "us," or "our") collects, uses, and shares information in connection with the Clean Feed Extension (the "Extension") and any associated website or services (collectively, the "Service").

1.2 We are committed to protecting your personal data and comply with applicable data protection regulations, including the General Data Protection Regulation (EU) 2016/679 ("GDPR") and German data protection laws.

1.3 Data Controller
The Data Controller for the Extension and associated services is:
I'mUp UG (haftungsbeschränkt)
Germany
Email: julian@imup.app
We are responsible for determining the purposes and means of processing your personal data.

2. Data We Collect

2.1. No Data Collected Through the Extension

  • We do not collect any personal data or other information through the Extension itself.
  • We do not track your browsing activities or store any personally identifiable information when you use our Extension.

2.2. Payment Data

For payment processing (if applicable), we use Stripe. The payment provider collects and processes your payment information in accordance with their privacy policy.

  • We do not receive or store your full payment details.
  • We only receive basic transaction information from Stripe, such as the payment status (e.g., whether payment succeeded or failed).

2.3. Payment Status Verification via ExtensionPay (ExtPay)

In addition to using Stripe, we integrate ExtensionPay ("ExtPay") to manage and verify payment or subscription status within the Extension.

  • Data Sent to ExtPay: When the Extension checks payment status or initiates a trial, an API key identifying our Extension is sent to ExtPay's servers. This API key does not contain your personal data but allows ExtPay to determine if you have paid for, are trialing, or have access to premium features for this specific Extension.
  • Data Retrieved from ExtPay: ExtPay may inform us of your payment status (paid/not paid), payment date (paidAt), trial start date (trialStartedAt), and trial duration, if applicable.
  • Purpose: We use this information strictly to enable or disable features for paid or trial users.
  • No Storage of Personal Payment Info: We do not store any personal payment details (like credit card numbers or email addresses) provided during the payment process. All sensitive payment information is handled by Stripe and ExtPay.

Statement from ExtPay About Stored User Data:

"The only time ExtensionPay collects your data is when you pay for an extension. We collect your email address and store your payment information securely in Stripe, a payment service used by Twitter, LinkedIn, and thousands of other sites. We don't sell your information or share it with anyone."

ExtPay's Privacy Policy: For more information on ExtPay's handling of your data, please refer to ExtensionPay's Privacy Policy or any relevant documentation on their website.

2.4. Website Data (If Applicable)

If you use our associated website:

  • We do not use analytics or tracking cookies, or (if you do) provide details about what type of cookies or analytics tools you use.
  • If you submit information via a contact form or newsletter signup on the website, we only use it to respond to your request or send updates.
  • We will not share your contact details with third parties for marketing purposes without your explicit consent.

3. How We Use Your Data

3.1 Since we do not collect personal data through the Extension (beyond payment status checks), the only limited information we may have relates to payment transactions and payment status verification.

3.2 We use payment-related information to:

  • Verify and process payments for the Service.
  • Determine access to premium or trial features.
  • Provide customer support if needed (e.g., confirm subscription status).
  • Comply with legal obligations, such as accounting and tax regulations.

3.3 Browser Storage (Local Storage or Sync Storage)

  • The Extension may store minimal settings (e.g., user preferences) locally in your browser to ensure the correct functioning of features.
  • These settings remain on your device and are not transmitted to our servers.

4. Legal Basis for Processing (GDPR)

4.1 Contractual Necessity:
We process payment transaction information based on Article 6(1)(b) of the GDPR, as it is necessary to fulfill our contractual obligations to you (e.g., granting premium access to paying users).

4.2 Legal Obligation:
In some cases, we may rely on Article 6(1)(c) of the GDPR to comply with legal obligations (e.g., tax regulations).

5. Sharing Your Data

5.1 Service Providers:

  • Stripe: We share data with our payment processor, Stripe, to facilitate transactions. Stripe is contractually obliged to protect your data and use it only for the purposes of providing payment services to us.
  • ExtPay: We communicate with ExtPay to verify payment status. ExtPay may receive the Extension's API key and relevant status checks to provide information about whether you have paid or are on a trial.

5.2 Legal Compliance:

We may disclose your data if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

6. Data Retention

6.1 We retain payment transaction information for as long as is necessary to fulfill the purposes outlined in this Policy, including compliance with legal obligations, dispute resolution, and enforcement of our agreements.

6.2 We do not store personal data from the Extension itself, as no direct personal data is collected. The only information handled by the Extension is the payment status from ExtPay, which we do not store permanently on our servers. Any minimal references to payment or subscription status are kept only as needed to ensure the correct function of our Service.

7. Your Rights (GDPR)

7.1 Under the GDPR, you have the right to:

  • Access your personal data (if any) and obtain a copy.
  • Rectify any inaccurate or incomplete personal data.
  • Erase your personal data (right to be forgotten), subject to certain exceptions.
  • Restrict or object to the processing of your personal data.
  • Data portability (in some cases).
  • Withdraw consent at any time where processing is based on your consent (though we do not rely on consent here for processing payment information).

7.2 You also have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data infringes the GDPR. For instance, you may contact the data protection authority in the Member State of your habitual residence or place of work.

7.3 If you have any questions or wish to exercise your rights, please contact us at julian@imup.app.

8. International Data Transfers

8.1 If we transfer data outside the European Economic Area, we ensure it is protected with appropriate safeguards, such as Standard Contractual Clauses or other legally recognized measures.

8.2 Stripe and ExtPay may process data in locations outside the EEA. They are committed to complying with GDPR requirements for cross-border data transfers and implement measures like Standard Contractual Clauses to ensure the protection of your data.

9. Security

9.1 We maintain appropriate technical and organizational measures to protect your data against unauthorized or unlawful processing, accidental loss, destruction, or damage.

9.2 Since we do not store personal data for the Extension, the focus of our security measures is on payment data—primarily handled by Stripe and ExtPay. These third parties employ their own security measures to safeguard your information.

10. Children's Privacy

10.1 Our Service is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children. If you become aware of a child providing us with personal data, please contact us so we can remove it.

11. Changes to This Policy

11.1 We may update this Policy from time to time to reflect changes in our data practices or regulatory requirements. We will post any updates on our website, and the updated version will be indicated by the "Last Updated" date above.

12. Contact Us

12.1 If you have any questions about this Policy or wish to exercise your rights under the GDPR, please contact us at:

I'mUp UG (haftungsbeschränkt)
Germany
Email: julian@imup.app

Effective Date: January 8, 2025