Privacy Policy

This Privacy Policy explains how Everluts ("we", "us", "our") collects, uses, stores, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws. By accessing or using everluts.com, you agree to this Policy.

1. Data Controller

Everluts
Email: hey@everluts.com

If you have any questions regarding this Policy or wish to exercise your rights, please contact us at the address above.

2. Personal Data We Collect

a) Data You Provide Directly

• Name
• Email address
• Account credentials (if you create an account)
• Billing information (processed securely by third-party providers)
• Support inquiries or messages

We do not store complete payment card details.

b) Automatically Collected Data

When you browse our website, we automatically collect:

• IP address
• Browser type and version
• Device identifiers
• Usage data (pages visited, actions taken, time spent)
• Cookie data

c) Uploaded Photos (LUT Editor)

When you upload photos to preview LUTs in the LUT Editor, you acknowledge and agree that:

• We store the uploaded image on our secure servers to enable LUT rendering and editor functionality.
• The image is not shared, not sold, not published, and not used for machine learning or AI training.
• Only automated systems use the image for rendering; staff do not access images unless required for technical troubleshooting.
• You may request full deletion of your uploaded images at any time by contacting hey@everluts.com.

d) Purchase Information

• Order details
• Products purchased
• Transaction identifiers
• Download history

3. Legal Basis for Processing (GDPR Article 6)

We process your data under the following legal bases:

• Contract (Art. 6(1)(b)) — to provide and deliver digital products, maintain accounts, and enable the LUT Editor
• Consent (Art. 6(1)(a)) — for analytics, functional cookies, and communication preferences
• Legitimate Interest (Art. 6(1)(f)) — for platform security, fraud prevention, service improvement
• Legal Obligation — for tax, accounting, and regulatory compliance

We do not collect special-category data (GDPR Article 9).

4. How We Use Personal Data

We use personal data to:

• Process and deliver digital product orders
• Maintain user accounts and authentication sessions
• Provide LUT Editor functionality and image rendering
• Improve site performance, quality, and user experience
• Respond to support inquiries
• Prevent fraud and maintain platform security
• Comply with legal requirements

We do not sell, rent, or trade your personal data.

5. Data Storage and Retention

We store personal data only as long as necessary:

• Account data: until the user deletes the account
• Order records: 5–10 years (legal accounting requirements)
• Uploaded photos: temporary; deleted upon request
• Analytics data: up to 26 months
• Support correspondence: up to 24 months

If you request deletion, we delete or anonymize your data unless legal obligations require retention.

6. Data Sharing with Third Parties

We may share limited data with carefully selected service providers, such as:

a) Payment processors

(e.g., Stripe, PayPal) — for secure payment processing.

b) Analytics providers

(e.g., Google Analytics) — to analyze usage patterns based on your consent.

c) Hosting and infrastructure providers

Used to store website data and uploaded images securely.

d) Legal authorities

When required by law.

We do not share your data with advertisers or unrelated third parties.

7. International Data Transfers

If personal data is transferred outside the EEA, we ensure protection via:

• EU Standard Contractual Clauses (SCCs)
• GDPR-compliant service providers
• Additional technical and organizational safeguards

8. Security Measures

We use industry-standard security measures such as:

• HTTPS encryption
• Secure servers and firewalls
• Access control mechanisms
• Regular monitoring for vulnerabilities

However, no online system is fully secure. By using our platform, you acknowledge this inherent risk.

9. Your GDPR Rights

You have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data ("Right to be forgotten", Art. 17)
• Restrict processing (Art. 18)
• Data Portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent at any time

To exercise your rights, contact: hey@everluts.com
We will respond within 30 days as required by GDPR.

10. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or significant effects on users.

11. Children's Privacy

Our platform is not designed for individuals under 13 years of age. We do not knowingly collect children's personal data.

12. Cookies and Tracking Technologies

Everluts uses cookies to ensure essential functionality, improve performance, and understand how users interact with the platform.

Types of Cookies We Use

a) Essential Cookies

Required for the website to operate (e.g., authentication, cart, security). These do not require consent.

b) Functional Cookies

Used to remember preferences and settings. Legal basis: Consent

c) Analytics Cookies

Used to measure site performance and usage patterns. Legal basis: Consent

d) Marketing Cookies (only if added in the future)

Used for personalized ads and remarketing. Legal basis: Consent

Cookie Duration

• Session cookies: deleted when browser closes
• Persistent cookies: stored for 12–26 months depending on purpose

Managing Cookies

You may:

• Manage preferences via our cookie banner
• Withdraw consent at any time
• Disable cookies via your browser settings

Disabling essential cookies may affect website functionality.

13. Changes to This Policy

We may update this Privacy Policy occasionally. The updated version will always include a new "Last updated" date. Continued use of Everluts after updates constitutes acceptance of the revised terms.

14. Contact Information

For any questions, requests, or concerns regarding your personal data, contact: hey@everluts.com