Summary of Our Privacy Practices
We collect minimal data: account info (name, email), uploaded files (deleted after processing), and usage analytics via Google Analytics. We do not sell your personal data. We comply with GDPR, CCPA, and Google AdSense requirements. You can request data access, correction, or deletion at any time.
1. Introduction
Penkara ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at https://penkara.com (the "Site") and use our tools and services.
We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable privacy laws. By using our Site, you consent to the practices described in this policy.
Quick answer: We only collect what is necessary to provide our services. We never sell your data. You have full control over your information.
2. Information We Collect
2.1 Information You Provide to Us
| Data Type | What We Collect | Purpose |
|---|---|---|
| Account Info | Name, email, password (hashed) | Account creation and authentication |
| Social Login | Name, email from Google/Facebook/GitHub | Alternative login method |
| Contact Form | Name, email, subject, message | Customer support |
| Newsletter | Email address | Sending updates (with consent) |
| Payment Info | Transaction ID, payment method | Processing purchases |
| Profile | Avatar, timezone | Personalization |
2.2 Information Collected Automatically
| Data Type | What We Collect | Purpose |
|---|---|---|
| Log Data | IP, browser, pages visited, time spent | Analytics and security |
| Cookies | Session, CSRF, analytics cookies | Site functionality and improvement |
| Usage Data | Tools used, interactions, file metadata | Service improvement |
2.3 Files You Upload
Many of our tools process files you upload (images, PDFs, documents). These files are processed temporarily and automatically deleted. By default, processed files are available via browser session only. If you explicitly choose "Save for 24 hours," files are retained for up to 24 hours and then permanently deleted.
We do not access, view, or use your uploaded files for any purpose other than providing the requested service. Your files are processed automatically and deleted immediately.
3. Cookie Policy
3.1 Essential Cookies
| Cookie | Purpose | Duration |
|---|---|---|
penkara-session | Maintains login session and preferences | Session |
XSRF-TOKEN | CSRF protection for form submissions | 2 hours |
3.2 Analytics Cookies
We use Google Analytics (ID: G-RZSX7HWCQ2) to understand how visitors interact with our Site. Google Analytics uses cookies to collect anonymized information. Learn more at Google Privacy Policy.
3.3 Advertising Cookies
We participate in Google AdSense, which uses cookies to serve personalized advertisements. You can opt out at Google Ad Settings.
3.4 Managing Cookies
You can control cookies in your browser settings. Disabling essential cookies may affect Site functionality. For more information, visit aboutcookies.org.
4. How We Use Your Information
- Provide, maintain, and improve our tools and services
- Process transactions and manage your account
- Communicate with you about your account and support requests
- Send newsletters (only with explicit consent)
- Analyze usage patterns to improve user experience
- Detect, prevent, and address technical issues and fraud
- Comply with legal obligations
5. Legal Basis for Processing (GDPR)
For EEA residents, we process data based on:
- Contractual Necessity: Fulfilling our Terms of Service
- Consent: Newsletter subscriptions and non-essential cookies
- Legitimate Interests: Service improvement and security
- Legal Obligation: Compliance with applicable laws
6. Data Sharing
| Third Party | Purpose | Data Shared |
|---|---|---|
| Stripe | Payment processing | Payment info, transaction details |
| PayPal | Payment processing | Payment info, transaction details |
| PayMob | Payment processing | Payment info, transaction details |
| Google Analytics | Usage analytics | Anonymized usage data |
| Google reCAPTCHA | Bot protection | Interaction data |
| Cloudflare Turnstile | Security | Browser fingerprint |
| Social Providers | Social login | Name, email (from provider) |
We do not sell your personal information to third parties. We only share data with service providers who help us operate our services, and they are contractually bound to protect your data.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Account information | While account is active (plus 5-7 years for legal compliance) |
| Contact form submissions | Up to 2 years |
| Uploaded files | Deleted immediately after processing (or within 24 hours if saved) |
| Analytics data | 26 months (Google Analytics default) |
| Newsletter subscription | Until you unsubscribe |
8. Data Security
- SSL/TLS encryption for all data in transit
- Bcrypt hashing for password storage
- Regular security audits and updates
- Strict access controls for employee data access
- Secure server infrastructure with firewalls
No method of transmission over the Internet is 100% secure. While we implement industry-standard security measures, we cannot guarantee absolute security.
9. Your Rights
GDPR Rights (EEA Residents)
| Right | Description | How to Exercise |
|---|---|---|
| Access | Request a copy of your personal data | Email us at support@penkara.com |
| Rectification | Correct inaccurate data | Update in account settings or email us |
| Erasure | Request deletion ("Right to be Forgotten") | Email us at support@penkara.com |
| Restrict Processing | Limit how we use your data | Email us at support@penkara.com |
| Data Portability | Receive your data in machine-readable format | Email us at support@penkara.com |
| Object | Object to processing based on legitimate interests | Email us at support@penkara.com |
| Withdraw Consent | Withdraw previously given consent | Unsubscribe or email us |
CCPA Rights (California Residents)
- Right to Know: Request disclosure of categories and specific data collected
- Right to Delete: Request deletion of personal information
- Right to Opt-Out: We do not sell personal information
- Right to Non-Discrimination: No discrimination for exercising your rights
To exercise any rights: Contact us at support@penkara.com. We respond within 30 days (GDPR) or 45 days (CCPA). You also have the right to lodge a complaint with your local data protection authority.
10. Google AdSense
Our Site participates in the Google AdSense program, which uses cookies to serve personalized advertisements. Google uses the DoubleClick cookie to serve relevant ads.
- Opt out: Google Ad Settings
- How Google uses data: Google Partner Sites
- We comply with the EU User Consent Policy
11. Third-Party Links
Our Site may contain links to social media platforms (Facebook, Twitter/X, GitHub, LinkedIn, Instagram, YouTube). We are not responsible for the privacy practices of these third parties.
12. Children's Privacy
Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. Contact us if you believe a child has provided us with data.
13. International Data Transfers
Your information may be transferred to countries other than your own. We ensure appropriate safeguards through Standard Contractual Clauses (SCCs) when transferring data from the EEA.
14. Changes to This Policy
We may update this policy at any time. Material changes will be posted on this page with a new "Last Updated" date. Significant changes will be notified via email or prominent notice on our Site.
15. Contact Us
For privacy-related inquiries:
- Email: support@penkara.com
- Contact Form: penkara.com/contact