Privacy Policy

Dylas, a business established in Lithuania, is the data controller for the personal data described here. That means we decide why and how your personal data is processed when you use the Dylas service.

1. What we collect

• Account data: email address, display name, authentication identifiers.
• Listing data: the URLs, descriptions and images you submit, plus the analysis generated from them.
• Subscription data: plan, status, renewal dates and payment references (card details are handled by our payment provider, never by us).
• Technical data: minimal logs needed for security and troubleshooting.

2. Why we use it

• To perform the contract: run analyses, save your deals, provide your plan.
• Legitimate interests: service security, abuse prevention, product improvement.
• Legal obligation: accounting and tax records for payments.

3. Automated analysis and processors

Listing content you submit is sent to AI model providers to produce the analysis. It is not used to build a profile about you and is not sold. Our infrastructure processors host the database, authentication and application.

4. Who we share data with

• Paddle.com Market Ltd — our reseller and Merchant of Record. Paddle handles the sale of Dylas Pro, checkout, payments, subscription management, invoicing, tax compliance and billing support, and acts as its own controller for that data. See Paddle's privacy notice at https://www.paddle.com/legal/privacy.
• Service providers — hosting, database, authentication and AI model providers acting on our instructions.
• Professional advisers — accountants and lawyers where necessary.
• Authorities — where we are required to disclose by law.

5. Security

We apply appropriate technical and organisational measures to protect your data: encryption in transit, encryption at rest for stored analyses and account records, row-level access rules so each account can only reach its own data, restricted administrative access, and card details never touching our systems because payments are processed by Paddle.

6. Retention

Saved analyses are kept until you delete them or delete your account. Payment and invoicing records are kept as long as accounting law requires.

7. Your rights

You have the right to access, rectify, erase, restrict and port your data, to object to processing, to withdraw consent where processing is based on it, and to lodge a complaint with the Lithuanian State Data Protection Inspectorate. We respond within one month. You can delete individual analyses in the app at any time, and deleting your account removes your saved data.

8. International transfers

Where processors operate outside the EEA, transfers rely on the European Commission's standard contractual clauses or an adequacy decision.

9. Contact

For privacy requests, use the "Delete account" and data controls on your Dylas account page, or the contact route listed in the imprint. For anything related to a purchase, invoice or refund, contact Paddle at paddle.net as Merchant of Record.