Privacy Policy

Last Updated: January 15, 2025

1. Introduction

Welcome to Sabo ("we," "our," or "us"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website and purchase our product.

This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

Sabo is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: support@aristo.so

3. Information We Collect

3.1 Information You Provide

Payment Information: Name, email address, and billing details (processed securely by Stripe)
Communications: Messages, feedback, and support requests you send to us

3.2 Automatically Collected Information

Usage Data: Pages visited, time spent on site, referring website
Device Information: Browser type, operating system, IP address
Cookies: Essential cookies for website functionality and analytics

3.3 Information from Third Parties

Payment Processors: Transaction information from Stripe for order fulfillment

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

Contract Performance: To process your purchase and deliver the product (Article 6(1)(b) GDPR)
Legitimate Interests: To improve our website and prevent fraud (Article 6(1)(f) GDPR)
Legal Obligation: To comply with tax and accounting laws (Article 6(1)(c) GDPR)
Consent: For optional marketing communications (Article 6(1)(a) GDPR)

5. How We Use Your Information

We use your information to:

Process your purchase and deliver the product
Send order confirmation and product download links
Provide customer support
Send product updates and important notifications
Prevent fraud and ensure payment security
Comply with legal and tax obligations
Improve our website and user experience (with anonymized data)

6. Data Sharing and Disclosure

We share your information only with:

6.1 Service Providers

Stripe: Payment processing (they handle all payment card information)
Vercel: Website hosting and content delivery

6.2 Legal Requirements

We may disclose your information if required by law or in response to:

Legal processes (subpoenas, court orders)
Tax authorities or government requests
Protection of our rights or investigation of fraud

6.3 Business Transfers

In the event of a merger, acquisition, or sale, your information may be transferred to the acquiring entity with prior notice.

7. International Data Transfers

Our website is hosted on servers in the United States (Vercel). Payment processing is handled by Stripe, which operates globally. We ensure adequate protection through Standard Contractual Clauses and other legally compliant mechanisms.

8. Data Retention

We retain your personal data for:

Purchase records: 7 years (legal requirement for tax purposes)
Email communications: Until you unsubscribe or request deletion
Website analytics: 2 years in aggregated, anonymized form

9. Your Rights (GDPR)

You have the following rights regarding your personal data:

Right of Access: Request a copy of your personal data
Right to Rectification: Request correction of inaccurate data
Right to Erasure: Request deletion of your data (except records required by law)
Right to Restriction: Request limitation of processing
Right to Data Portability: Request your data in a portable format
Right to Object: Object to processing for direct marketing
Right to Withdraw Consent: Withdraw consent for optional processing
Right to Lodge a Complaint: File a complaint with your data protection authority

To exercise your rights, contact us at: support@aristo.so

10. Data Security

We implement industry-standard security measures to protect your data:

Encryption in transit (TLS/SSL)
Secure payment processing via Stripe (PCI DSS compliant)
Regular security monitoring
Limited access to personal data

However, no method of internet transmission is 100% secure. We cannot guarantee absolute security.

11. Cookies

We use essential cookies for website functionality and analytics. You can control cookies through your browser settings. Disabling cookies may affect website functionality.

12. Children's Privacy

Our website is not intended for children under 16. We do not knowingly collect personal data from children.

13. Third-Party Links

Our website may contain links to third-party sites (e.g., demo site). We are not responsible for their privacy practices.

14. Marketing Communications

With your consent, we may send you product updates and offers. You can opt out anytime by:

Clicking "unsubscribe" in any email
Contacting us at support@aristo.so

15. California Privacy Rights (CCPA)

California residents have additional rights:

Right to know what personal information is collected
Right to deletion of personal information
Right to opt out of sale (we do not sell your information)
Right to non-discrimination

16. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you by:

Updating the "Last Updated" date
Posting the updated policy on our website

Continued use of our website constitutes acceptance of changes.

17. Contact Us

For questions or to exercise your rights:

Email: support@aristo.so

For GDPR requests, include "GDPR Request" in the subject line.