Privacy Notice

This Privacy Notice explains how Galabina ("we", "us"), the operator of Sold, handles your personal data. We are the data controller for the personal data described in this notice.

1. Data we collect

• Account data — name/email address and login credentials, used to create and secure your account (legal basis: contract performance).
• Product & session data — the product descriptions you enter, practice conversation transcripts, scores, verdicts, and generated scripts, used to provide the Service (legal basis: contract performance).
• Support messages — if you contact us, we keep the correspondence to help you (legal basis: legitimate interests).
• Usage and device data — pages visited, events (e.g. sign-up, completed session), device identifiers, and IP address, used for analytics, security, fraud prevention, and product improvement (legal basis: legitimate interests; consent where required).

2. How we share data

• Service providers / subprocessors — hosting, database, AI processing, and analytics providers that process data on our behalf.
• Paddle (Merchant of Record) — when you purchase a subscription, Paddle processes payment, subscription management, tax compliance, and invoicing data as Merchant of Record.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where disclosure is required by law.

3. International transfers

Some of our service providers process data outside your country (including outside the UK/EEA). Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

4. Retention

We keep your personal data for as long as your account is active and as needed to provide the Service, meet legal obligations, and resolve disputes. Data is deleted or anonymised when no longer needed.

5. Your rights

Depending on your location, you may have the right to access, rectify, or erase your personal data; to restrict or object to processing; to data portability; and to withdraw consent at any time. EEA/UK users also have the right to lodge a complaint with a supervisory authority; we respond to requests within one month. To exercise any right, contact us at the support address shown in the app. You can also delete your account from the Account page.

6. Security

We apply appropriate technical and organisational measures, including encryption in transit and access controls, to protect your personal data.

7. Cookies

We use essential cookies/storage required for sign-in and security, and analytics cookies (Google Analytics) to understand how the site is used. You can manage cookies through your browser settings; blocking essential cookies may prevent sign-in.

8. Changes

We may update this notice from time to time. Material changes will be posted on this page with an updated date.