Privacy Policy — Foursquare BLUEPRINT

1. Data Controller

The controller responsible for the processing described in this policy is Pretty Decent Exposure AB, reg. no. 559444-2104, Björngårdsgatan 1 b, 118 52 Stockholm, Sweden. Contact for privacy matters: master@planetcreative.se.

2. Scope of this Policy

This policy applies to Personal Data (information relating to an identified or identifiable natural person) that we process as a controller, i.e., for our own purposes. It does not apply to business and brand data inputted by corporate customers, which is governed by our Terms of Service, nor to personal data we process on behalf of customers as a processor, which is governed by our Data Processing Agreement (DPA).

3. Personal Data We Collect

• Account Information: name, email address, corporate affiliation, and login credentials.
• Payment Information: payment metadata via Stripe. We do not store full credit card numbers on our servers; all payment processing is handled securely by Stripe.
• Technical Data: IP address, browser type, device information, and usage logs collected via cookies and similar technologies to ensure platform security and functionality.
• Support Data: the content of communications when you contact our support.

4. Purposes and Legal Bases for Processing

Where we rely on legitimate interest, we have assessed that our interest is not overridden by your rights and freedoms. You may object at any time (see Section 9).

5. Cookies and Similar Technologies

We use strictly necessary cookies for login, security, and core functionality, and — only with your consent — analytics cookies to understand platform usage. You can manage non-essential cookies via the cookie banner or your browser settings. Strictly necessary cookies cannot be disabled as the Service would not function without them.

6. Data Sharing and Sub-Processors

We do not sell personal data. We share data only with trusted third-party providers necessary to run our Service, primarily:

• Stripe: for payment processing and subscription management.
• Cloud Infrastructure Provider: Google Cloud for secure data hosting and storage.

We may also disclose personal data where required by law, or in connection with a merger or acquisition, in which case this policy will continue to apply to the data.

7. International Transfers

Whenever personal data is transferred outside the EEA (e.g., to US-based sub-processors), we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses (SCCs) together with supplementary measures where needed, or an adequacy decision (e.g., the EU–US Data Privacy Framework where the recipient is certified). You may request a copy of the relevant safeguards via the contact details in Section 1.

8. Data Retention

9. Your Rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15);
• have inaccurate data rectified (Art. 16);
• have your data erased (“right to be forgotten”, Art. 17);
• restrict processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interest, including direct marketing (Art. 21); and
• withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise these rights, contact us at master@planetcreative.se. We respond within one month. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), www.imy.se, or with the supervisory authority in your country of residence.

10. Automated Decision-Making and Profiling

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. Machine learning development described in our Terms of Service is performed on business and brand content, not for profiling individual Users.

11. Security

We apply appropriate technical and organizational measures to protect personal data, including encryption in transit and at rest, access controls and authentication, logging and monitoring, and regular backups. Access to personal data is limited to personnel who need it to perform their duties and who are bound by confidentiality.

12. Children

The Service is intended for business use and is not directed at children under 18. We do not knowingly collect personal data from children.

13. Changes to this Policy

We may update this Privacy Policy from time to time. The current version is always available on our website. If changes are material, we will notify Users by email or in the Service before they take effect.

14. Contact

Pretty Decent Exposure AB, Björngårdsgatan 1 b, 118 52 Stockholm, Sweden. Email: master@planetcreative.se.