Privacy policy

The controller of your data is Cleanly, through the cleanlytweaks.com website. For any question about personal data you can write to us at cleanlytweaks@outlook.com.

Account data: your email address, your display name and, when signing in with Discord/Google, the identifier and avatar provided by that service.

Licence and activation data: your licence, the devices it is activated on (a technical device identifier, the device name, the operating system, the app version) and your sign-in/activation history.

Order data: the plan purchased, the amount, the currency and a transaction identifier. Payment details (card number, etc.) are entered directly with Paddle and NEVER reach us.

Benchmark data: the results of the tests you choose to upload, associated with your account.

Technical data: your IP address and the minimum information needed for security, abuse prevention and the operation of the site.

To create your account, deliver your licence and provide the app — performance of the contract.

To process payments and issue confirmations/invoices — performance of the contract and legal obligations.

To send you transactional emails (account confirmation, password reset, order confirmation) — performance of the contract.

For security, fraud prevention and abuse limitation — our legitimate interest.

We do not send you marketing communications without your consent.

We do not sell your data. We share it only with providers who help us operate the service, under confidentiality obligations:

Supabase — authentication and database. Paddle — payment processing (Merchant of Record). Brevo (Sendinblue) — delivery of transactional emails. Cloudflare — hosting and security. Discord and Google — only if you choose to sign in through those services.

We may disclose data if required by law or to defend our rights.

Some of the providers above may process data outside the European Economic Area. In those cases, transfers are carried out with the safeguards required by the GDPR (for example, the European Commission's standard contractual clauses).

We keep account and licence data for as long as you have an active account. Order data is kept for the period required by legal obligations (for example, tax). When you delete your account, we remove or anonymize data that no longer needs to be kept by law.

You have the right to access, rectification, erasure, restriction and objection to processing, as well as the right to data portability. You can withdraw your consent at any time, where processing is based on consent.

You can exercise your rights by writing to us at cleanlytweaks@outlook.com. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — www.dataprotection.ro.

We use strictly necessary cookies and similar technologies (for example, for the sign-in session). Details are in the Cookie policy.

We apply technical and organizational measures to protect your data: encrypted connections (HTTPS), row-level access control in the database, rate limiting and isolation of payment data at Paddle's level. No system, however, is 100% secure.

We may update this policy; the version in force is the one published here, with the last-updated date above. For any question, write to us at cleanlytweaks@outlook.com.