Privacy Policy
Last updated: 2026-10-15
Template — not legal advice. Adjust it to the data you actually collect.
Controller
SIA "Markrip Labs" (registration number 40203725109), Krāslavas iela 7-12, Rīga, LV-1003, Latvia. Contact: markriplabs@gmail.com.
What we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Email address, name | Account and sign-in | Contract |
| Session data (IP address, browser) | Security and fraud prevention | Legitimate interest |
| Purchase records | Providing paid features | Contract |
| Ghost site URL, title, logo, accent colour | Connecting your site and designing cards | Contract |
| Ghost Admin API key (stored encrypted) | Reading posts, uploading cards, setting social images | Contract |
| Post title, author name and photo, feature image, publish date, reading time and tags | Rendering the card for each post | Contract |
| Email address (platform interest list) | Telling you when Sharecard supports the platform you picked | Consent |
| Support requests (message, site URL, last sync error) | Answering your request | Contract |
We read only the posts we add cards to and never copy post content. Generated images are uploaded to your own Ghost site. Disconnecting deletes the stored key and removes our webhook from your site.
Payment details are collected and processed by Paddle as Merchant of Record; we never see your card number.
Processors
- Vercel (hosting, web analytics) — USA/EU
- Neon (database) — EU (Frankfurt)
- Resend (email delivery) — USA
- Paddle (payments) — UK/EU
- Google (only if you choose Google sign-in)
International transfers rely on Standard Contractual Clauses or adequacy decisions.
Retention
Account data is kept while your account exists. Deleting your account removes it, except records we must keep for legal or tax reasons.
Platform interest list emails are kept until we tell you that Sharecard supports your platform, or until you ask us to remove them (reply to any email or contact support).
Support requests are kept until resolved and then for up to 12 months.
Your rights
You can access, correct, export or delete your data, object to processing, and complain to your data protection authority. Email markriplabs@gmail.com.
Analytics
On our public pages (not in your dashboard) we use Vercel Web Analytics to count page views. It sets no cookies and doesn't identify you: visits are counted with a hash of the request that is discarded within 24 hours.
Cookies
We use only strictly necessary cookies (sign-in session). We don't use advertising cookies.