Privacy Policy for PAPEPO LTD Services

1. Introduction

Welcome to PAPEPO LTD ("we", "our", or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our web applications, including **TALKEPO** and **SHOPEPO** via papepo.dev, in compliance with the UK GDPR and the EU General Data Protection Regulation (GDPR).

2. Data We Collect

Depending on which service you use, we may collect and process:

- Account & Contact Data: Names, email addresses, and business details when you register.

- Service-Specific Content:

- For TALKEPO: Input Data including text, voice recordings, or documents submitted for translation.

- For SHOPEPO: Loyalty & Transaction Data, including digital stamp cards, points accumulated, and reward redemption histories.

- Payment & Billing Data: Financial details processed securely via third-party providers (such as Stripe) for merchant subscriptions. We do not store full credit card details.

- Technical & Usage Data: IP address, browser type, device information, operating system, and pages visited via cookies and analytics tools.

3. How We Use Your Data (Lawful Basis)

We process your data under the following lawful bases:

- Performance of a Contract: To deliver and maintain translation services (TALKEPO) or loyalty platform features (SHOPEPO).

- Legitimate Interests: To improve our platforms, ensure security, and prevent fraud.

- Consent: Where you explicitly consent to specific uses (such as optional cookies or marketing).

4. Third-Party Service Providers & Data Sharing

- AI Partners (for TALKEPO): Text and voice inputs are transmitted to trusted AI partners (such as the Gemini API) for real-time translation without training public models.

- Payment Processors (for SHOPEPO): Billing details are shared with certified providers like Stripe.

- Infrastructure: Reliable cloud hosting and database providers.

- Legal Compliance: Disclosures required by law or to protect rights and safety.

5. International Data Transfers

Your data may be transferred outside your home country. Where data leaves the UK/EEA, appropriate safeguards (such as Standard Contractual Clauses) are applied.

6. Data Retention

We retain personal data only as long as necessary to fulfill collection purposes, manage subscriptions, or satisfy legal/accounting obligations. Real-time translation inputs are not stored longer than needed.

7. Your Data Protection Rights (UK & EU GDPR)

Under UK and EU GDPR, you have the right to access, rectify, erase, restrict, object to processing, and request data portability. Contact us via papepo.dev to exercise these rights.

8. Security Measures

We implement robust technical and organizational measures to secure your data, though no internet transmission is 100% secure.

9. Changes to This Privacy Policy

Updates will be posted on this page with a revised "Last updated" date.

10. Contact Information

For privacy-related inquiries, contact us directly through papepo.dev.