1. Data Controller
CREEZ SI ELEVEZ S.R.L. (operating as MixTrackID) is the data controller for personal data collected through mixtrackid.app.
Contact: hello@mixtrackid.app
2. Data We Collect
- Account data: email address, username, password (hashed)
- Profile data: reputation score, wallet balance, transaction history
- Payment data: processed by Stripe — we do not store card details
- Usage data: requests posted, answers submitted, peeks purchased
- Technical data: IP address, browser type, device information (via Vercel analytics)
- Communications: emails sent/received through our notification system
3. How We Use Your Data
- To provide and operate the MixTrackID platform
- To process payments and manage your wallet
- To send transactional notifications (answer received, payment confirmed, etc.)
- To send alert notifications you have subscribed to
- To resolve disputes and maintain platform integrity
- To comply with legal obligations
4. Legal Basis (GDPR)
- Contract performance: processing necessary to provide our services
- Legitimate interest: fraud prevention, platform security
- Consent: marketing communications and non-essential cookies
- Legal obligation: tax and financial record keeping
5. Data Sharing
We share data only with trusted service providers necessary to operate MixTrackID:
- Supabase — database and authentication (EU servers)
- Stripe — payment processing
- Vercel — hosting and infrastructure
- Resend — transactional email delivery
We do not sell your personal data to third parties.
6. Data Retention
- Account data: retained while your account is active + 2 years after deletion
- Financial records: 5 years (Romanian legal requirement)
- Deleted account data: anonymized within 30 days of deletion request
7. Your Rights (GDPR)
As an EU resident, you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Portability — receive your data in a structured format
- Objection — object to certain processing activities
- Withdraw consent — at any time, for consent-based processing
To exercise these rights, email us at hello@mixtrackid.app. We will respond within 30 days.
8. Cookies
We use cookies for authentication and analytics. See our Cookie Policy for details.
9. Security
We implement industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and row-level security on our database. However, no system is 100% secure and we cannot guarantee absolute security.
10. Children
MixTrackID is not directed at children under 18. We do not knowingly collect data from minors.
11. Changes
We may update this Privacy Policy periodically. We will notify you of significant changes via email.
12. Complaints
If you believe we have mishandled your data, you have the right to lodge a complaint with the Romanian data protection authority (ANSPDCP) at dataprotection.ro.