Privacy Policy

1. Introduction

MediaCODE d.o.o. operates Flumen Studio, a desktop application for creating cycling video overlays. This Privacy Policy explains what personal data we collect, how we use it, and what rights you have regarding your data when you use our website (getflumen.com) and related services.

2. Data Controller

The data controller responsible for your personal data is:

• Company: MediaCODE d.o.o.
• Address: Lepusici 75, 10040 Zagreb, Croatia
• VAT: HR02253992940
• Email: legal@getflumen.com

3. Data We Collect

Account Data

When you register for an account, we collect your email address, display name, and country. This data is stored securely in our Supabase database.

Payment Data

Payments are processed by Stripe. We do not store your credit card numbers or full payment details on our servers. Stripe handles all payment information in accordance with PCI-DSS standards.

Usage Data

We use Google Analytics to collect anonymized browsing data on our website, such as pages visited, time on site, and general location. This data helps us understand how visitors use our website.

Activity Data

FIT, GPX, and TCX files you use with Flumen Studio are processed locally on your computer within the desktop application. These files are never uploaded to our servers.

4. How We Use Your Data

We use the data we collect for the following purposes:

• To provide and maintain the Flumen Studio service
• To manage your subscription and process payments
• To communicate with you about your account, updates, and support
• To improve the product based on aggregated usage patterns

5. Data Sharing

We share your data only with the following third-party service providers, strictly for the purposes described:

• Stripe - for payment processing
• Supabase - for authentication and data storage (servers located in the EU)
• Google Analytics - for website analytics
• Vercel - for website hosting

We never sell your personal data to third parties.

6. Cookies

Our website uses the following types of cookies:

Essential Cookies

Supabase authentication cookies are required for login functionality. These cookies are necessary for the service to work and cannot be disabled.

Analytics Cookies

Google Analytics cookies collect anonymized data about how you use our website. You can opt out of Google Analytics by using the Google Analytics Opt-out Browser Add-on.

7. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Right of access - request a copy of the data we hold about you
• Right to rectification - request correction of inaccurate data
• Right to erasure - request deletion of your personal data
• Right to data portability - receive your data in a structured, machine-readable format
• Right to object - object to certain types of data processing

To exercise any of these rights, contact us at legal@getflumen.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) if you believe your data rights have been violated.

8. Data Retention

• Account data is retained for as long as your account is active.
• Upon account deletion, your personal data will be removed within 30 days.
• Payment records may be retained for longer periods as required by applicable tax and accounting laws.

9. Security

We take the security of your data seriously:

• All data is encrypted in transit (HTTPS) and at rest.
• Supabase provides enterprise-grade security for data storage and authentication.
• We conduct regular security reviews of our infrastructure and practices.

10. Children

Flumen Studio is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at legal@getflumen.com and we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via email. We encourage you to review this page periodically for the latest information.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

• Email: legal@getflumen.com
• MediaCODE d.o.o., Lepusici 75, 10040 Zagreb, Croatia