Privacy Policy - My5Stars

1. Introduction

At My5Stars ("we," "our," or "us"), we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website, mobile application, and services (collectively, the "Service"). This policy complies with both United States laws and regulations as well as the General Data Protection Regulation (GDPR) of the European Union.

2. Data Controller

My5Stars is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us using the information in the Contact Information section.

3. Information We Collect

3.1 Personal Information

Account information: email address, username, and password
Profile information: name, profile picture (optional)
Business information: store details, migration settings
Usage data: activity records, migration logs, and statistics

3.2 Automatically Collected Information

Device information: IP address, browser type, operating system
Usage information: pages visited, features used, time spent on the Service
Cookies and similar technologies: used to enhance your experience and collect usage information

4. How We Use Your Information

We use your information for the following purposes:

To provide and maintain our Service
To create and manage your account
To track and analyze your migration activities
To personalize your experience and provide relevant features
To communicate with you about the Service, updates, and support
To improve our Service and develop new features
To ensure the security of our Service and prevent abuse
To comply with legal obligations

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

Performance of a contract: to provide you with the Service
Legitimate interests: to improve our Service, ensure security, and prevent fraud
Consent: where you have explicitly agreed to specific uses of your data
Legal obligation: to comply with applicable laws and regulations

6. Data Sharing and Disclosure

We may share your information with:

Service providers who help us operate, maintain, and improve the Service
Other users when you choose to share data or achievements
Legal authorities when required by law or to protect our rights

We do not sell your personal information to third parties.

7. Data Retention

We retain your personal information for as long as necessary to provide you with the Service and as required by law. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are legally required to retain certain information.

8. Your Privacy Rights

Depending on your location and applicable U.S. privacy laws (such as the California Consumer Privacy Act and similar state laws), you may have the following rights:

Right to know: Request information about the personal information we collect, use, and disclose.
Right to access: Request a copy of the personal information we hold about you.
Right to correction: Request that we correct inaccurate or incomplete information.
Right to deletion: Request that we delete your personal information in certain circumstances.
Right to opt-out: Opt out of certain data sharing practices.
Right to non-discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, please contact us using the information provided in the Contact Information section. We will respond to verified requests within the timeframes required by applicable law.

9. Account Deletion and Data Removal

You can delete your account and associated data at any time through the account settings page. Upon deletion:

All personal information (including email, name, and profile details) will be permanently removed from our active systems
All business data (including migration logs and related records) will be permanently deleted
Any shared content will be anonymized or removed
Backup copies of this information may remain in our backup systems for up to 90 days, but will not be accessed or used except as required by law

10. Data Security

We implement appropriate technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee absolute security.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. When we transfer your data internationally, we implement appropriate safeguards in accordance with both United States law and the GDPR (such as Standard Contractual Clauses) to ensure your data is protected to the standards required by applicable law.

12. Children's Privacy

Our Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us immediately.

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email or through the Service prior to the changes becoming effective. We encourage you to review this Privacy Policy periodically for any changes.

14. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us using our Contact Form.

15. GDPR Rights for EU/EEA Users

If you are located in the European Economic Area (EEA) or United Kingdom, under the General Data Protection Regulation (GDPR), you have the following additional rights:

Right to restrict processing: Request that we limit how we use your data.
Right to data portability: Request a copy of your data in a structured, machine-readable format.
Right to object: Object to our processing of your data in certain circumstances.
Right to withdraw consent: Withdraw consent where processing is based on consent.
Right to lodge a complaint: Lodge a complaint with a supervisory authority in your country of residence.

To exercise these rights, please contact us using the information provided in the Contact Information section. We will respond to your request within 30 days.