Privacy Policy

This policy explains what data IVY System (including IVY Shield and Print Studio) collects, how it is used, stored, secured and shared, and what control you have over it.

1. Who is responsible

The data controller is Noir Pixel Studio Iwona Bielecka, Palestyńska 1a, 03-321 Warsaw, Poland, VAT ID PL5242492216. Contact: hello@ivysystem.co.

2. What we collect

• Account data: your email address, name (if provided), and billing details via Stripe (we receive customer and payment IDs, not your credit card number).
• Authentication data: session tokens (stored only as cryptographic hashes), magic link tokens, and verified OAuth profiles (such as Google sign-in email and avatar).
• Connected shop data (optional): shop name and active listing metadata (titles, tags, descriptions) accessed via the Etsy API or public product catalogues when using IVY Shield. We do not access customer payment info, bank details, orders, or private messages.
• Print Studio uploads: image files you upload to generate print dimensions and interior mockups. Files are processed securely in temporary storage and are under your control.
• Technical data: strictly necessary cookies (ivy_session) to maintain your login status securely.

3. How we use it

• To provide the Service: courses, passport progress, print generation, and trademark screening.
• To manage your account, active subscriptions, customer portal access, and statutory invoices.
• To send course notifications, system updates, and login links.

Legal bases (GDPR): performance of contract (Art. 6(1)(b)), legal obligations for accounting (Art. 6(1)(c)), and legitimate studio interests (Art. 6(1)(f)). We never sell your personal data or trade customer information.

4. Processors and infrastructure

• Cloudflare — global website infrastructure, edge compute, and database storage.
• Stripe — PCI-compliant payment processing, tax calculation, and subscription billing.
• Resend — transactional email delivery and magic sign-in links.
• Google — optional OAuth identity verification for Google sign-in.

5. Data retention & your rights

Under the GDPR, you have the right to access, rectify, download, or delete your personal data at any time. When you disconnect a shop or close your account, your data is erased, except where retention is mandatory for accounting (5 years under Polish law). Contact us anytime at hello@ivysystem.co.

6. Cookies

We use strictly necessary functional session cookies (ivy_session) to keep you signed in securely. We do not sell ad tracking cookies.

7. Etsy

The term 'Etsy' is a trademark of Etsy, Inc. This Application uses Etsy's API, but is not endorsed or certified by Etsy. Etsy's own privacy policy applies to your usage on Etsy.