Privacy Policy

Welcome to Escalium ("we", "our", or "us"). We are committed to protecting your privacy and handling your personal data in a transparent and secure manner.

This Privacy Policy explains how we collect, use, and protect your personal information when you use https://escalium.io ("the Service").

Escalium operates globally and is based in Spain. We comply with the General Data Protection Regulation (GDPR) and, where applicable, other international privacy laws.

By using our Service, you agree to the practices described in this Privacy Policy.

The data controller responsible for your personal data is:

Escalium
Based in Fuengirola, Málaga, Spain
Contact: hello@escalium.io

We use your personal data for the following purposes:

• To provide and operate the Service
• To create and manage user accounts
• To process payments and subscriptions
• To deliver customer support
• To improve platform performance and user experience
• To detect fraud, abuse, or security issues
• To send transactional communications (e.g. account or billing emails)
• To send marketing communications (where legally permitted)

• Contractual necessity: to provide access to the Service
• Legal obligations: accounting, tax, and compliance requirements
• Legitimate interest: security, fraud prevention, service improvement
• Consent: marketing communications, cookies, and tracking technologies where required

Payments are processed securely via Stripe. We do not store or have access to full credit card details. Stripe acts as a third-party payment processor and handles payment information according to its own privacy policy.

We use third-party service providers to operate the Service, including:

• Analytics providers (e.g. Google Analytics)
• Advertising platforms (e.g. Meta Pixel)
• Payment processors (e.g. Stripe)
• Email service providers (e.g. Resend)
• Hosting and infrastructure providers (VPS hosting, databases, and cloud storage such as S3)
• Affiliate tracking systems (cookie-based attribution with 12-month duration)

These providers may process personal data on our behalf under their own privacy policies and/or data processing agreements.

We use cookies and similar technologies for essential functionality, analytics, marketing, and affiliate tracking. Where required by law, we request your consent via a cookie consent banner before activating non-essential cookies.

You may control or disable cookies through your browser settings. See our Cookie Policy for full details.

We retain personal data only for as long as necessary:

• Account data: while the account remains active + up to 90 days after deletion
• Transaction data: up to 10 years (legal/tax obligations)
• Analytics data: limited retention depending on provider settings
• Support communications: up to 12–24 months

After retention periods, data is deleted or anonymized.

You may request deletion of your account at any time. Upon deletion:

• Your personal data is removed or anonymized within 30–90 days
• Certain data may be retained where required by law (e.g. financial records)

If you are located in the EEA or other applicable jurisdictions, you have the following rights:

• Access your personal data
• Rectify inaccurate or incomplete data
• Request deletion of your data
• Restrict or object to processing
• Data portability
• Withdraw consent at any time

To exercise your rights, contact: hello@escalium.io

Your data may be processed outside the EEA, including in the United States or other countries where our service providers operate. When we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses (SCCs) approved by the European Commission.

We implement appropriate technical and organizational measures to protect your data, including:

• Encrypted passwords
• Secure hosting infrastructure
• Access controls and authentication systems
• Secure storage systems (including S3-based storage)
• Monitoring for unauthorized access or abuse

However, no system is completely secure, and we cannot guarantee absolute security.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify:

• Affected users, and
• Relevant supervisory authorities, as required by GDPR

The Service is not directed to individuals under 16 years of age. We do not knowingly collect personal data from children under this age. If we become aware of such data collection, we will delete it promptly.

We use affiliate tracking cookies to attribute referrals and conversions. These cookies use last-click attribution, have a duration of up to 12 months, and may be set by our affiliate system when users interact with referral links.

We may update this Privacy Policy from time to time. Changes will be published on this page with an updated “Last updated” date. If changes are significant, we may notify users via email or in-app notification.

If you have any questions about this Privacy Policy or your data, contact us at: hello@escalium.io