Privacy Policy

GLOBIX Sp. z o.o. is a limited liability company registered in Poland, with its registered office at Żółwia 22/73, 01-927 Warsaw. For the purpose of the EU GDPR and UK GDPR, GLOBIX is the data controller of personal data processed via the Service. You can reach our data protection team at [email protected].

We collect the following categories of personal data:

• Account data: first and last name, email address, password (stored hashed), preferred language.
• Billing data: billing name, address, VAT/Tax ID, purchase history, credit balance, payment method metadata. Card numbers and bank credentials are processed by our payment providers and never reach our servers.
• Usage data: features used, projects created, credits consumed, device, browser, IP address, approximate location, timestamps.
• Content: files, scenes, assets and comments you upload or create using the Service.
• Communications: messages you send to our support, sales or community channels.

• To provide, operate, secure and improve the Service.
• To process purchases, issue invoices and apply promo codes or refunds (including our 14-day money-back guarantee).
• To communicate with you about your account, security, transactional events and product updates you have opted in to.
• To prevent fraud, abuse and violations of our Acceptable Use Policy.
• To comply with legal obligations and respond to lawful requests from authorities.

We rely on the following legal bases under the GDPR: (i) performance of a contract, when we provide the Service you signed up for; (ii) our legitimate interests in operating, securing and improving the Service; (iii) your consent, for optional analytics cookies and marketing communications; and (iv) compliance with a legal obligation.

We do not sell your personal data. We share it only with:

• Service providers acting on our behalf (hosting, email delivery, analytics, customer support, payment processing), bound by appropriate contractual safeguards.
• Authorities, when required by law or to protect the rights, property or safety of GLOBIX, our users or the public.
• Successors in interest in the event of a merger, acquisition or sale of assets, subject to confidentiality undertakings.

GLOBIX is headquartered in the United States and uses sub-processors located outside the EEA and UK. Where required, we rely on Standard Contractual Clauses approved by the European Commission and, where applicable, the UK International Data Transfer Addendum.

We retain account and content data for as long as your account is active. After deletion, we keep backups and certain records for up to 90 days, and longer where required for tax, accounting or legal purposes (typically 7 years for invoices).

Depending on where you live, you may have the right to access, rectify, erase, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. To exercise any of these rights, email [email protected]. You may also lodge a complaint with your local supervisory authority.

We protect your data with encryption in transit (TLS 1.2+) and at rest, role-based access controls, least-privilege production access and continuous monitoring. GLOBIX is SOC 2 Type II and ISO 27001 certified.

The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

We may update this Privacy Policy from time to time. Material changes will be announced via email or an in-product notice at least 14 days before they take effect.