1. Identification and Data Controller

For purposes of applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the California Consumer Privacy Act ("CCPA/CPRA"), the data controller and responsible party is:

MONETIZANDO TU PASION LTD
Efesou 9, CP 5280 Paralimni, Cyprus
Email: [email protected]

MONETIZANDO TU PASION LTD is a company incorporated under the laws of the Republic of Cyprus and subject to applicable EU and Cypriot data protection regulations, as well as U.S. federal and state privacy laws to the extent applicable based on user location.

2. Data Protection Officer (DPO)

MONETIZANDO TU PASION LTD has assessed its data processing activities in accordance with Article 37 of the GDPR. Based on the nature, scope, and purposes of our processing activities — which do not involve large-scale systematic monitoring of individuals or large-scale processing of special categories of data — the designation of a Data Protection Officer is not mandatory at this time.

For any data protection inquiries, requests, or concerns, please contact us directly at: [email protected]. We will respond to all privacy-related requests within the timeframes required by applicable law.

3. Collection of Personal Information

We collect personal information directly from you and automatically through your use of the Services. This may occur when you:

• Create an account
• Subscribe to a paid plan
• Contact us via forms or email
• Browse or interact with our website

The information collected may include identifiers such as your name, email address, billing details, and transaction history. We also collect technical data such as IP address, browser type, device information, and usage data through cookies and similar technologies.

3.1 Automatically Collected Information

This includes information collected through cookies or similar mechanisms, IP address, device type and characteristics, operating system version, browser type, language, date, country, time of request, referring URL, and destination URL.

We use Google Analytics, a service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043). Google uses cookies that collect information, including your IP address, which is transmitted, processed, and stored by Google under the terms established at www.google.com. You may opt out of Google Analytics at: https://tools.google.com/dlpage/gaoptout

3.2 Information You Voluntarily Provide

This includes information required to complete your registration (name and email address) and information required to contract the Service (billing address and payment details). All required fields are mandatory for the provision of the Service.

3.3 Information Provided by Third Parties

This includes information provided by payment processors, such as the time and amount of a purchase. Payment card details are processed exclusively by our certified third-party payment providers and are not stored by us at any time.

4. Use of Personal Information

We collect and use personal information strictly for the following purposes. We do not send commercial marketing communications. All communications from Image Resize are transactional in nature (account confirmations, subscription updates, billing notifications, and support responses).

We adhere to data minimization principles and do not retain unnecessary personal information. We do not use automated decision-making processes that produce legal or similarly significant effects on users.

5. Disclosure of Personal Information

We may share personal information only in the following circumstances:

• Service Providers: vendors who assist with payment processing, web hosting, analytics, or customer support. These providers may access information necessary to perform their functions but are contractually prohibited from using it for any other purpose.
• Legal Obligations: to comply with applicable laws, binding court orders, or lawful requests from governmental authorities in the Republic of Cyprus, the European Union, or the United States, as applicable.
• Business Transactions: in connection with a merger, acquisition, or sale of assets. In such cases, users will be notified via email and/or a prominent notice on our website prior to the transfer of their information.
• With Your Explicit Consent: when you have expressly authorized a specific disclosure.

We do not share personal information with third parties for their own marketing purposes.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to collect information about how users interact with the Services. These tools help us improve functionality, analyze usage, and maintain service security.

You can manage cookie preferences through your browser settings at any time. For additional guidance, visit allaboutcookies.org. We use Google Analytics. This provider may collect information in accordance with its own privacy policy. You may opt out of Google Analytics tracking at: https://tools.google.com/dlpage/gaoptout

For more detailed information about the specific cookies we use, their purpose, and how to manage them, please refer to our Cookies Policy.

7. Sale of Personal Information

We do not sell your personal information to third parties for monetary consideration, and we have not done so in the preceding 12 months. We do not share your personal information with third parties for their own direct marketing purposes.

We may use aggregated, anonymized data — which cannot be used to personally identify any individual — for analytical or statistical purposes.

8. Data Security

We implement appropriate technical and organizational measures to protect personal information against unauthorized access, accidental alteration, loss, or destruction. These measures include SSL/TLS encryption for all data transmissions and secure payment processing through certified third-party providers.

No system can be completely secure. You are responsible for maintaining the confidentiality of your account credentials and for any activity occurring under your account. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authorities without undue delay, in accordance with applicable law.

9. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this Policy, comply with our legal obligations, resolve disputes, and enforce our agreements. The following retention periods apply:

Inactive accounts without an active subscription may be closed and associated personal data deleted after an extended period of inactivity. You will be notified before any such deletion where reasonably practicable.

10. International Transfers of Personal Information

MONETIZANDO TU PASION LTD is established in the Republic of Cyprus, which is a Member State of the European Union. Personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, in connection with our use of service providers such as Google Analytics.

All such transfers are carried out in accordance with Chapter V of the GDPR and rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) adopted by the European Commission pursuant to Article 46(2)(c) GDPR. We do not rely on user consent as the legal basis for international data transfers.

For users in the United States, data may be processed on servers located within or outside the U.S. In all cases, we apply the same level of protection described in this Privacy Policy regardless of where data is processed.

11. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights with respect to your personal information:

• Right to Access: request a copy of the personal data we hold about you.
• Right to Correct: request correction of inaccurate or incomplete personal information.
• Right to Delete: request erasure of your personal information, subject to legal retention obligations.
• Right to Restrict Processing: request that we limit how we use your personal information in certain circumstances.
• Right to Object: object to processing based on legitimate interests.
• Right to Data Portability: receive your personal data in a structured, commonly used, machine-readable format.
• Right to Opt Out: opt out of certain data-sharing practices where applicable.

To exercise any of these rights, please contact us at [email protected]. We will respond within the timeframe required by applicable law. We may need to verify your identity before processing your request.

12. California Privacy Rights (CCPA/CPRA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA):

Right to Know

You may request information about the categories and specific pieces of personal information we have collected about you, the sources of collection, our purposes for using it, and the third parties with whom we share it.

Right to Delete

You may request deletion of personal information we have collected from you, subject to certain legal exceptions.

Right to Correct

You may request correction of inaccurate personal information we maintain about you.

Right to Opt Out of Sale or Sharing

We do not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising. If this practice ever changes, we will update this Policy and provide a clear opt-out mechanism prior to doing so.

Right to Limit Use of Sensitive Personal Information

Where applicable, you may limit our use of sensitive personal information to what is strictly necessary to provide the Service.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CCPA/CPRA rights. You will not receive a different quality of service or different pricing as a result of exercising these rights.

Right to Use an Authorized Agent

You may designate an authorized agent to submit CCPA/CPRA requests on your behalf. We may require verification of the agent's authorization and confirmation of your identity before processing the request.

Shine the Light

Under California's Shine the Light law, California residents may request details about how their personal information is disclosed to third parties for direct marketing purposes. We do not share personal information with third parties for their direct marketing purposes.

Minors (Under 18 — California)

California residents under 18 years of age who are registered users of the Services may request the removal of content or information they have publicly posted, pursuant to California Business and Professions Code Section 22581. To submit a request, contact us at [email protected]. Note that complete removal cannot be guaranteed in all circumstances.

To exercise any of your California privacy rights, please submit a verifiable consumer request to: [email protected]. We will respond within 45 days as required by the CCPA/CPRA. This period may be extended by an additional 45 days when reasonably necessary, with prior notice.

13. European Privacy Rights (GDPR)

As a company established in the Republic of Cyprus, MONETIZANDO TU PASION LTD is subject to the General Data Protection Regulation (EU) 2016/679 (GDPR). If you are located in the European Union or the European Economic Area, you have the following rights under the GDPR:

• Right of access (Art. 15): obtain confirmation of whether we process your personal data and request a copy.
• Right to rectification (Art. 16): request correction of inaccurate or incomplete personal data.
• Right to erasure (Art. 17): request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to restriction of processing (Art. 18): request that we restrict processing of your personal data in certain circumstances.
• Right to data portability (Art. 20): receive your personal data in a structured, commonly used, machine-readable format and transmit it to another controller.
• Right to object (Art. 21): object to processing of your personal data based on our legitimate interests. We will cease such processing unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to withdraw consent (Art. 7(3)): where processing is based on your consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

You also have the right to lodge a complaint with the competent supervisory authority. For users in the Republic of Cyprus, the relevant authority is the Commissioner for Personal Data Protection (www.dataprotection.gov.cy). For users in other EU Member States, the relevant authority is the data protection authority of your country of residence.

To exercise any of your GDPR rights, please contact us at [email protected]. We will respond within 30 days as required by the GDPR. This period may be extended by two additional months for complex or multiple requests, with prior notice.

14. Children's Information

The Services are intended for use by adults only. You must be at least 18 years of age to create an account or use the Services.

We do not knowingly collect personal information from individuals under the age of 18. If we become aware that a user under 18 has provided us with personal information, we will take immediate steps to delete such information and close the associated account.

If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us immediately at [email protected].

15. Do Not Track (DNT) Signals

Our Services do not currently respond to Do Not Track (DNT) browser signals, as there is no universally accepted standard for how websites should interpret them. We will continue to monitor developments in this area and update this Policy if a recognized standard is established.

We do recognize and respond to the Global Privacy Control (GPC) signal. Where technically feasible, we will honor GPC signals as opt-out requests from the sale or sharing of personal information, in accordance with applicable California law.

16. Updates to This Privacy Policy

We may revise this Privacy Policy periodically to reflect legal, regulatory, or operational changes. We will notify you of material changes by sending a notice to the email address associated with your account and/or by placing a prominent notice on our website.