Privacy Policy

1. Introduction

Master GenieAce Ltd ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our software products, or interact with our services.

We are a company registered in England and Wales, and we comply with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name and contact information (email address, phone number, postal address)
• Account credentials and profile information
• Payment and billing information
• Communications and correspondence with us
• Feedback, reviews, and survey responses
• Professional information (job title, company, industry)

2.2 Technical Information

We automatically collect certain technical information when you use our services:

• IP address and geographical location
• Browser type and version
• Operating system and device information
• Website usage data and analytics
• Software usage patterns and performance data
• Cookies and similar tracking technologies

2.3 Creative Content

When you use our software products, we may collect:

• Project files and creative assets (only when necessary for service provision)
• Usage statistics and feature utilization data
• Error reports and diagnostic information
• Backup and synchronization data (with your consent)

3. How We Use Your Information

We use your information for the following legitimate business purposes:

3.1 Service Provision

• Providing, maintaining, and improving our software products
• Processing transactions and managing subscriptions
• Providing customer support and technical assistance
• Facilitating account creation and management

3.2 Communication

• Sending important service updates and notifications
• Responding to inquiries and providing customer support
• Sending newsletters and marketing communications (with consent)
• Conducting surveys and collecting feedback

3.3 Business Operations

• Analyzing usage patterns to improve our products
• Conducting research and development
• Ensuring security and preventing fraud
• Complying with legal obligations

4. Legal Basis for Processing

Under UK GDPR, we process your personal information based on the following legal grounds:

• Contract: Processing necessary to perform our contract with you or take steps to enter into a contract
• Legitimate Interest: Processing for our legitimate business interests, such as improving our products and services
• Consent: Where you have given clear consent for specific processing activities
• Legal Obligation: Processing necessary to comply with legal requirements

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our business, including:

• Cloud hosting and storage providers
• Payment processing services
• Email and communication services
• Analytics and monitoring services
• Customer support platforms

5.2 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Protect the rights, property, or safety of our users
• Investigate potential violations of our terms of service

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Specific retention periods include:

• Account Information: Retained while your account is active and for 7 years after closure for legal compliance
• Transaction Records: Retained for 7 years for accounting and tax purposes
• Marketing Communications: Retained until you unsubscribe or withdraw consent
• Technical Data: Anonymized and aggregated data may be retained indefinitely for analytics

7. Your Rights

Under UK data protection law, you have the following rights:

• Access: Request copies of your personal information
• Rectification: Request correction of inaccurate or incomplete information
• Erasure: Request deletion of your personal information in certain circumstances
• Restriction: Request limitation of processing in certain situations
• Portability: Request transfer of your data to another organization
• Objection: Object to processing based on legitimate interests or for marketing purposes
• Automated Decision Making: Rights regarding automated decision-making and profiling

To exercise any of these rights, please contact us using the information provided in Section 12.

8. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website. Our cookie usage includes:

8.1 Essential Cookies

Necessary for the website to function properly, including session management and security features.

8.2 Analytics Cookies

Help us understand how visitors use our website to improve functionality and user experience.

8.3 Marketing Cookies

Used to deliver relevant advertisements and track marketing campaign effectiveness.

You can manage your cookie preferences through our cookie consent banner or your browser settings. For more information, see our Cookie Policy.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and penetration testing
• Access controls and authentication mechanisms
• Employee training on data protection practices
• Incident response and breach notification procedures

However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

10. International Data Transfers

We primarily process data within the United Kingdom. When we transfer personal information to countries outside the UK, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the UK government
• Standard contractual clauses approved by UK authorities
• Binding corporate rules
• Certification schemes and codes of conduct

11. Children's Privacy

Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.

For users between 13 and 18, we require parental consent for certain processing activities as required by law.

12. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

13. Complaints

If you believe we have not handled your personal information in accordance with data protection law, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the "Last Updated" date
• Sending email notifications for significant changes
• Providing in-app notifications where applicable

Your continued use of our services after any changes indicates your acceptance of the updated Privacy Policy.

15. Definitions

Personal Information

Any information that identifies, relates to, describes, or is capable of being associated with an individual.

Processing

Any operation performed on personal data, including collection, recording, organization, storage, adaptation, retrieval, consultation, use, disclosure, or destruction.

Controller

The entity that determines the purposes and means of processing personal data. Master GenieAce Ltd is the controller for the purposes of this Privacy Policy.

Processor

An entity that processes personal data on behalf of the controller.