Privacy Policy

1. Data Controller

The Services are operated by:

ADIX acts as Data Controller for your personal data.

2. Data We Collect

We collect the following categories of personal data:

• • Signup Information: Name, Email address, Label/Organization name.
• • Account Information: Subscription plan and related account settings.
• • Usage Data: Information about how you use MyLabelDesk, including uploads, reviews, signings, and actions within your Organization's workspace (for analytics and reporting features).
• • Payment Information: Processed by Stripe on our behalf. We do not store credit card or billing details ourselves.
• • Communication Data: Emails you send us or that we send to you (transactional or, if opted in, marketing).

3. How We Use Your Data

We use your personal data for the following purposes:

• • To provide and maintain the Services.
• • To create and manage your account.
• • To enable your Organization to use MyLabelDesk analytics and collaboration features.
• • To process subscription payments (via Stripe).
• • To send you service-related communications (transactional emails).
• • If you have opted in: to send you marketing or product updates.
• • To ensure platform security, prevent fraud, and comply with legal obligations.

4. Legal Bases for Processing

We process your personal data on the following bases:

• • Contract: to provide you with the Services you signed up for.
• • Legitimate Interest: to improve our Services, ensure security, and provide analytics to your Organization.
• • Consent: for marketing communications (opt-in only).
• • Legal Obligation: where required to comply with law.

5. Data Storage and Hosting

Your data is stored and processed using trusted service providers:

• • Supabase (EU/Global) – databases and authentication.
• • Cloudflare R2 (EU/US regions) – storage of uploaded files.
• • Netlify (Global) – hosting of the frontend application.
• • Stripe (Global) – payment processing.
• • Google Workspace (EU/US) – email (SMTP) and communication.

We ensure all subprocessors provide appropriate safeguards under GDPR, including Standard Contractual Clauses for international transfers outside the EEA.

6. Retention Periods

• • Account and content data are retained while your account is active.
• • After termination, data is retained for 30 days to allow restoration if requested.
• • After 30 days, data is permanently deleted from our systems and backups, unless required by law.
• • Payment records may be kept longer for tax/accounting purposes.

7. Sharing of Data

We do not sell or rent your personal data. We may share your data only with:

• • Authorized subprocessors listed above, strictly for providing the Services.
• • Legal authorities, if required by law or court order.

8. User Rights (GDPR)

As a data subject, you have the following rights:

• • Right of access – request a copy of your personal data.
• • Right to rectification – correct inaccurate or incomplete data.
• • Right to erasure ("right to be forgotten") – request deletion of your data.
• • Right to restriction of processing – limit how we use your data.
• • Right to data portability – request export of your data.
• • Right to object – object to certain processing, including marketing.
• • Right to withdraw consent – at any time, for processing based on consent.

Requests can be sent to support@mylabeldesk.com. We will respond within 30 days.

9. Cookies & Tracking

MyLabelDesk uses only essential cookies required for authentication and operation. If analytics or marketing cookies are introduced in the future, we will request your consent.

10. Security

We implement technical and organizational measures to protect your data, including:

• • Encryption in transit (TLS/SSL) and at rest.
• • Role-based access control (RLS) in our databases.
• • Signed URLs for file access.
• • Regular monitoring of systems for vulnerabilities.

11. International Transfers

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards, such as EU Standard Contractual Clauses, are in place.

12. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify you by email or via the platform before significant changes take effect.

13. Contact

For privacy-related questions or to exercise your rights, please contact: