1. Introduction

Delvyn Studio ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Product Operating Model platform.

Our services are provided from and data is stored within the European Union, ensuring compliance with GDPR and other applicable privacy laws.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

Name and contact information (email address)
Account credentials and authentication information
Professional information (job title, organization)
Profile information you choose to provide

2.2 Usage Data

We automatically collect information about how you use our Service:

Log data (IP addresses, browser type, pages visited)
Device information (device type, operating system)
Usage patterns and preferences
Performance and interaction data

2.3 Business Data

Content you create and store in the platform:

OKRs (Objectives and Key Results)
Product vision and strategy documents
Product discovery projects and insights
Team and organizational data
Files and documents uploaded to the platform

3. How We Use Your Information

We use your information for the following purposes:

Providing and maintaining our Service
User authentication and account management
Personalizing your experience
Communicating with you about the Service
Improving our Service and developing new features
Ensuring security and preventing fraud
Complying with legal obligations

4. Legal Basis for Processing (GDPR)

We process your personal data based on the following legal grounds:

Contract: To provide the Service you've requested
Legitimate Interest: To improve our Service and ensure security
Consent: For marketing communications (where required)
Legal Obligation: To comply with applicable laws

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

Within your organization: With team members and administrators as needed for the Service
Service providers: With trusted third-party services that help us operate the platform (all located within the EU)
Legal requirements: When required by law or to protect our rights
Business transfers: In connection with a merger, acquisition, or sale (with appropriate safeguards)

6. Data Security and Storage

We implement appropriate technical and organizational measures to protect your personal data:

Data encryption in transit and at rest
Regular security assessments and monitoring
Access controls and authentication measures
Regular data backups and recovery procedures

All data is stored and processed within the European Union to ensure compliance with EU data protection standards.

7. Your Rights (GDPR)

Under GDPR, you have the following rights regarding your personal data:

Right of access: Request a copy of your personal data
Right to rectification: Correct inaccurate or incomplete data
Right to erasure: Request deletion of your personal data
Right to restrict processing: Limit how we use your data
Right to data portability: Receive your data in a portable format
Right to object: Object to certain types of processing
Right to withdraw consent: Where processing is based on consent

To exercise these rights, please contact us through the support channels available in the application.

8. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this Privacy Policy or as required by law. Account data is typically retained while your account is active and for a reasonable period after account closure to comply with legal obligations.

9. International Transfers

All data processing and storage occurs within the European Union. If we ever need to transfer data outside the EU, we will ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

10. Cookies and Tracking

We use cookies and similar technologies to improve your experience, analyze usage, and maintain user sessions. We categorize cookies into necessary, analytics, marketing, and preference cookies.

You can control your cookie preferences through our cookie settings page (available in the application settings) or through your browser settings. Necessary cookies cannot be disabled as they are essential for the platform to function.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page. We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us through the support channels available in the application.

For GDPR-related inquiries, you also have the right to lodge a complaint with a supervisory authority in the EU member state where you reside.