Privacy Policy
This policy explains what personal data Wingflower processes, why we process it, how long we keep it and how you can exercise your rights.
Who we are
Wingflower operates this website and the metal visualization platform. For privacy questions, write to [email protected] and we will respond within 30 days.
Data we collect
Account data: first name, last name, email address and a hashed password. Order data: credits purchased, currency, promo code, payment method and order status.
Content data: images and project files you upload for visualization, together with the material selections applied to them.
Technical data: IP address, browser type, device type and pages visited, collected through essential and optional cookies.
Why we process it
To create and maintain your account, to process credit purchases and bank transfers, to deliver the visualizations you request, to provide support, to prevent abuse and fraud, and to meet accounting and tax obligations.
Legal bases
We rely on contract performance for account and order processing, legitimate interest for security and service improvement, consent for optional analytics cookies, and legal obligation for financial record keeping.
Sharing and processors
We share data only with processors required to run the service: hosting and storage providers, email delivery, and our banking partner for transfer reconciliation. We do not sell personal data and we do not share it for advertising.
Retention
Account data is kept while your account is active. Uploaded images and generated visualizations are kept for 24 months unless you delete them earlier. Invoicing records are retained for the statutory period required by law.
Your rights
You may request access, correction, deletion, restriction, portability, or object to processing. Where processing is based on consent, you may withdraw it at any time. You also have the right to complain to your national data protection authority.
Security
Data is transmitted over encrypted connections and stored with access controls limited to staff who need it. Passwords are stored hashed and are never readable by our team.
Changes
We update this policy when our processing changes. Material changes are announced by email to account holders before they take effect.