Soapli

1. Overview

This Privacy Policy explains how Fourteen21 LLC ("Fourteen21", "we", "us", or "our"), operating the Soapli service ("Soapli", the "Service"), collects, uses, and protects information about you. Fourteen21 LLC acts as the data controller for personal data processed in connection with your Soapli account.

2. What we collect

• Account data: email address, encrypted password, sign-in timestamps, and optional profile details (such as studio/brand name).
• Workshop data: recipes, batches, inventory, customers, and orders you create in the app.
• Billing data: handled by our payment provider, Paddle. We store only your subscription status, plan, and billing identifiers — not card numbers.
• Usage and device data: basic analytics, IP address, browser/device identifiers, and error logs to operate and improve the Service.
• Support data: messages and attachments you send when contacting support.

3. How we use it

We use personal data to: create and operate your account, sync your workshop across devices, process subscription payments, provide customer support, send essential service emails, secure the Service against fraud and abuse, and improve product reliability. We do not sell your data.

4. Legal basis for processing

Where applicable law requires a legal basis (for example, the GDPR or UK GDPR), we rely on the following:

• Performance of a contract — to provide the Service to you under our Terms of Service (account creation, workshop sync, subscription delivery).
• Legitimate interests — to secure the Service, prevent fraud, debug errors, and improve the product, where these interests are not overridden by your rights.
• Legal obligation — to comply with tax, accounting, and other legal requirements.
• Consent — for any optional communications or non-essential cookies, where required. You may withdraw consent at any time.

5. Sharing and subprocessors

We share personal data only with service providers (subprocessors) that help us operate Soapli, and only as needed to provide the Service. Categories of recipients include:

• Payments — Paddle.com Market Limited ("Paddle"): Paddle acts as our Merchant of Record and payments subprocessor. Paddle processes checkout, billing, taxes, invoicing, refunds, and related customer service. See Paddle's Privacy Notice.
• Hosting and database: cloud infrastructure providers used to host the application and store your workshop data.
• Email delivery: transactional email providers used to send account, billing, and support messages.
• Analytics and error monitoring: providers that help us measure reliability and diagnose issues.
• Professional advisers and authorities: where required by law or to protect our rights.

All subprocessors are bound by appropriate data processing terms.

6. Your rights

Depending on where you live, you may have the right to access, correct, export, delete, or restrict processing of your personal data, to object to certain processing, and to lodge a complaint with your local data protection authority. You can exercise most of these rights from your account or by emailing hello@soapli.app. We aim to respond within 30 days.

7. Retention

We keep account and workshop data for as long as your account is active. After deletion, live records are removed promptly and backups are purged within 30 days, unless we must retain limited information to comply with legal obligations (such as tax records held by Paddle as Merchant of Record).

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), encryption at rest for stored data, role-based access controls, secret management, audit logging, and regular review of access. No system is perfectly secure, but we work to keep your data protected and to notify you and the relevant authorities of any breach as required by law.

9. International transfers

Your data may be processed in countries other than your own, including the United States. Where required, we and our subprocessors rely on appropriate safeguards (such as Standard Contractual Clauses) for international transfers.

10. Contact

Questions or requests? Reach us at hello@soapli.app or via our contact page. The data controller is Fourteen21 LLC.