Privacy policy

Last updated: [28.08.2025.]

This Privacy Policy explains how Graphonaut (“we,” “our,” or “us”) collects, uses, and protects your personal data when you use our website and services. We are committed to protecting your privacy and handling your personal information with transparency and care.

1. Data We Collect

We only collect personal data that you voluntarily provide when subscribing to our newsletter. This includes:

Email address

We do not collect any other personal data (such as names, addresses, or payment details) through our website.

We also use cookies and analytics tools (such as Google Analytics) to understand how visitors use our website. These technologies may collect information such as IP addresses, browser types, and usage data. For more information on cookies and analytics, please refer to our separate Cookie Policy.

2. How We Use Your Data

We use your email address to:

Send our newsletter and occasional updates
Share news, digital product offers, and promotions related to Graphonaut
Communicate important information regarding our services

We will not sell, rent, or trade your personal data to third parties.

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal data based on your consent (Article 6(1)(a) GDPR). You may withdraw your consent at any time by clicking the “unsubscribe” link in our emails or by contacting us directly.

4. Data Storage and Processors

Your email data is stored securely in SendFox, our chosen email marketing service provider. SendFox acts as a data processor on our behalf.

Backups of subscriber lists may occasionally be stored securely on our internal systems or in Google Drive, which also acts as a data processor under GDPR-compliant terms.

Our website hosting provider may also collect server logs automatically (such as IP addresses and error reports) for security and operational purposes.

5. Data Retention

We retain your email address until you unsubscribe from our mailing list. When you unsubscribe, your data will be deleted or anonymized from our active mailing system.

Google Analytics data is retained for up to 14 months (default setting) unless configured otherwise.

6. User Rights (GDPR and CCPA)

You have the following rights under applicable data protection laws:

Access – You may request a copy of the personal data we hold about you.
Correction – You may request corrections if your information is inaccurate or incomplete.
Deletion – You may request that we delete your personal data.
Objection – You may object to our processing of your data.
Portability – You may request your data in a machine-readable format.

CCPA (California) users also have the right to opt out of the sale of personal data. We do not sell your personal data.

To exercise any of these rights, please contact us at: [email protected]

7. Data Security

We take appropriate technical and organizational measures to protect your personal data against loss, unauthorized access, alteration, or disclosure.

8. Children’s Privacy

Our services are not directed to children under the age of 16 (or under 13 in the U.S.), and we do not knowingly collect data from them. If you believe a child has provided us with personal data, please contact us so we can delete it.