Privacy Notice — SundayDriveAI

This Privacy Notice describes how SundayDriveAI ("we", "us", or "our") collects, uses, and shares personal data when you use our website and services (the "Service"). SundayDriveAI is the data controller for personal data processed in connection with the Service.

1. Personal data we collect

Account data: name, email address, and login credentials.
Assessment data: responses you submit through the diagnostic and generated roadmaps.
Support communications: messages you send to our support team.
Usage and telemetry: pages viewed, features used, device identifiers, IP address, and browser type.
Cookies: essential cookies for authentication and session management.

2. Purposes and legal bases

Creating and securing your account, and providing the Service (contract performance).
Customer support and responding to inquiries (contract performance / legitimate interests).
Securing the Service and preventing fraud and abuse (legitimate interests).
Improving our product and analytics (legitimate interests).
Complying with legal obligations (legal obligation).

3. How we share personal data

We share personal data with the following categories of recipients:

Service providers and subprocessors who host our infrastructure, provide analytics, and support tooling.
Paddle.com Market Limited ("Paddle"), our Merchant of Record, for the sale of subscriptions, payment processing, subscription management, tax compliance, invoicing, and refunds.
Professional advisers such as legal and accounting professionals.
Authorities and other parties where required by law or to protect our rights.

4. Data retention

We retain personal data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. When no longer needed, data is deleted or anonymized.

5. Your rights

Depending on your jurisdiction, you may have the right to access, correct, delete, restrict processing of, or port your personal data, and to object to processing or withdraw consent. To exercise these rights, contact us using the details below. You also have the right to lodge a complaint with your local data protection authority.

6. Security

We use appropriate technical and organizational measures — including encryption in transit, access controls, and least-privilege practices — to protect personal data against unauthorized access, loss, or alteration.

7. Cookies

We use essential cookies necessary to operate the Service (for example, to keep you signed in). You can manage cookies through your browser settings; disabling essential cookies may impact your ability to use the Service.

8. Changes to this notice

We may update this Privacy Notice from time to time. Material changes will be communicated through the Service or by email.

9. Contact

For privacy questions or to exercise your rights, contact SundayDriveAI through our website.