Privacy Policy

The controller of your personal data is:

Marcin Czaja, conducting business under the name ICHERRY
Address: Zielona 57, 34-471 Ludźmierz, Poland
NIP: PL7352738441
Email: support@rosea.io

Depending on how you interact with the website and services, the controller may collect:

a) Contact and support data

• Name
• Email address
• Message content
• Technical information related to your request

(when you contact the controller via email or https://support.rosea.io/ (opens in new tab))

b) Transaction-related data

For purchases made via third-party platforms (such as Lemon Squeezy or Envato), the controller may receive limited data such as:

• your email address
• product purchased
• transaction ID or order reference

This data is used to:

• identify your purchase
• provide access to the product
• deliver customer support
• communicate with you regarding your purchase (e.g. updates, important product information)

The controller does not process your payment details directly.

c) Newsletter data

If you subscribe to the newsletter, the controller may collect:

• email address
• optional metadata (e.g. subscription time, IP, engagement data)

d) Technical data

• IP address
• browser type
• device information
• pages visited

(collected via cookies or analytics tools)

The controller processes your data based on:

• Art. 6(1)(b) GDPR – performance of a contract (e.g. providing support or product access)
• Art. 6(1)(f) GDPR – legitimate interest (e.g. improving services, preventing abuse)
• Art. 6(1)(a) GDPR – consent (e.g. cookies, newsletter)

Your data may be used to:

• provide customer support
• respond to inquiries
• deliver and manage digital products
• verify purchases
• communicate with you about your purchase
• improve products and services
• ensure security and prevent abuse
• send newsletters and marketing emails (only with your consent)

Lemon Squeezy

Payments and billing may be handled by Lemon Squeezy (merchant of record). They process your payment data independently as a data controller.

Envato (ThemeForest)

If you purchase via Envato, they handle transactions and may share limited data necessary for support.

Email marketing (MailerLite)

The controller uses MailerLite to manage email subscriptions and send newsletters. Your email address and related data (such as interaction with emails) may be processed by MailerLite in accordance with their privacy policy.

Support system

Support requests submitted via https://support.rosea.io/ (opens in new tab) may be processed using third-party helpdesk tools.

Hosting and infrastructure

The website may be hosted by external providers who process technical data (e.g. server logs).

If you subscribe to the newsletter, the controller will process your email address to send you updates, product news, and marketing communications.

The legal basis for this processing is your consent (Art. 6(1)(a) GDPR).

You can withdraw your consent at any time by:

• clicking the unsubscribe link in any email
• contacting the controller at support@rosea.io

The controller retains personal data only as long as necessary:

• support data: up to 24 months after last contact
• transaction-related data: as required for accounting and legal obligations
• newsletter data: until you unsubscribe
• technical data: typically up to 12 months

If you are in the EU, you have the right to:

• access your data
• correct your data
• delete your data
• restrict processing
• object to processing
• data portability
• withdraw consent at any time

To exercise your rights, contact: support@rosea.io

You also have the right to lodge a complaint with a supervisory authority.

The website may use cookies and similar technologies.

Types of cookies used

• Essential cookies – required for website functionality
• Analytics cookies – help understand how visitors use the site

Analytics cookies are used only with your consent where required.

You can set or change optional cookies using the banner on your first visit and anytime via the cookie icon in the site footer (opens cookie preferences). Your choices are stored in your browser (localStorage).

For a standalone description of cookie types, consent, and third-party tools, see the Cookie Policy (English).

Some of the controller’s service providers (e.g. MailerLite or hosting providers) may be located outside the European Economic Area (EEA).

In such cases, data transfers are based on:

• Standard Contractual Clauses (SCCs), or
• other safeguards required under GDPR

The controller takes appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse.

The controller may update this Privacy Policy from time to time. The “Last updated” date will be revised accordingly.