Privacy policy

Controller

The data controller is KarmaPower, s.r.o., Bystrc ev. č. 2438, 635 00 Brno, Czechia. Contact: support@gapvalidator.com.

Data we process

• Account and workspace details such as name, email, role and authentication records.
• Validation content, generated assets, evidence, landing pages and workspace settings.
• Billing and transaction references. Card details are handled by Stripe and are not stored by GapValidator.
• First-party traffic events, referral and UTM data, coarse country information, payments and refunds for published validation pages.
• Connected Meta asset identifiers and encrypted access credentials when you authorize the Meta integration.
• Technical, security and service logs needed to operate and protect the service.

Purposes and legal bases

We process data to provide the contracted service, secure accounts, measure validations, handle billing and support requests, and comply with legal obligations. Where optional marketing or advertising technology requires consent, it should only be enabled after that consent has been obtained.

Service providers and international transfers

Depending on the features you use, data may be processed by hosting and email providers, Stripe, Meta, AI model providers such as OpenAI or Anthropic, and evidence collection providers such as Apify. We use contractual and technical safeguards appropriate to the destination and service.

Retention and security

We keep account and validation data while the account is active and for the period reasonably required for contractual, tax, fraud-prevention and legal purposes. Access tokens are encrypted at rest, kept server side and can be revoked by disconnecting the integration.

Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or object to processing. You may also complain to your local data protection authority. Send requests to support@gapvalidator.com.