Privacy Policy

Last updated: 2025-05-03

This Data Privacy Policy ("Privacy Policy") represents the standards that SUPBIS ("we", "us", or "our") adheres to in order to ensure that we collect, use, store, and disclose personal data in a fair, transparent, and secure manner. This Policy reflects our commitment to compliance with data protection laws, including the General Data Protection Regulation (GDPR) and other relevant legal obligations applicable under the laws of the Republic of Lithuania.

This Privacy Policy applies to all personal data we process in relation to our services and is applicable to all users, customers, and visitors of SUPBIS.

1. Scope

This Privacy Policy covers all personal data processed by SUPBIS across all formats (digital or physical) and in all territories where we operate. It applies to:

Users of the SUPBIS platform,
Website visitors,
Customers subscribing to our services,
Business partners and vendors.

The Policy also applies to third-party service providers who perform services on our behalf and who must comply with privacy standards equivalent to those outlined in this Policy.

2. What Personal Data We Collect

We may collect and process the following types of data:

Name, email address, and contact information
Payment and billing data (via Lemon Squeezy, Stripe, PayPal, or similar processors)
User preferences and subscription settings
API usage details (not the content generated through OpenAI API)
Technical data (browser type, device, IP address, location, cookies)

Note: SUPBIS does not collect or store your OpenAI API key usage data or the content you send to OpenAI. All GPT-based content is processed securely via your own OpenAI account and key.

3. Use of Personal Data

We use personal data for the following purposes:

To deliver and operate the SUPBIS service
To manage subscriptions and payments
To communicate with users (support, billing, feature updates)
To improve our services and provide better user experiences
To comply with legal obligations

We only process data on lawful grounds, including consent, contractual obligations, and legitimate business interests.

4. AI & ML Usage Policy

SUPBIS does not use any Google Workspace APIs or user data obtained from Google services to develop, improve, or train generalized or non-personalized AI or machine learning (ML) models.
SUPBIS only passes user inputs from Google Sheets to the OpenAI API using the customer’s own OpenAI account and API key, as defined by the user’s explicit actions within their spreadsheet environment.
No Google Workspace user data is collected or used for AI/ML model development.
Any data transmitted to third-party APIs (such as OpenAI) is user-controlled and limited to the input/output of the user’s session. This data is not used to train generalized AI or ML models.
SUPBIS operates as a local add-on within the user’s Google Workspace environment and does not store or process content server-side.

5. Payments & Third Parties

All payment transactions are securely handled by Lemon Squeezy, Stripe, PayPal, or other authorized processors. SUPBIS does not store or process full payment details.

We may share personal data with trusted service providers who help us deliver our services, such as:

Google Workspace (for script integration)
Hosting and analytics platforms
Email and support systems

These parties are bound by confidentiality and data protection obligations.

6. API Key Usage

Customers are solely responsible for obtaining and managing their own OpenAI API keys. These keys are not included in the SUPBIS subscription price. SUPBIS only uses your API key locally within your Google Sheets environment and does not store or transmit it to our own servers.

7. Single-User License & Access Control

Each subscription is licensed for use by one individual user only. Sharing a subscription across multiple users or teams is not permitted. Separate subscriptions must be purchased for each user.

8. Data Retention

We retain personal data only for as long as necessary to:

Provide our services
Fulfill contractual obligations
Comply with applicable legal requirements

Data is securely deleted when no longer needed.

9. Your Rights as a Data Subject

Under GDPR and applicable laws, you have the right to:

Access your personal data
Request correction or deletion
Withdraw consent
Object to data processing
Request data portability
File a complaint with a supervisory authority

To exercise your rights, contact: support@supbis.com

10. Cookies and Tracking Technologies

We use cookies and similar technologies to:

Improve website functionality
Measure usage and performance
Support marketing and analytics (with consent)

You can manage your cookie preferences via your browser settings or our cookie consent tool.

11. Data Security

We implement appropriate technical and organizational measures to ensure the security of your data, including:

Encryption of communications
Access controls
Secure storage
Regular audits

Although no system is 100% secure, we are committed to minimizing risk and addressing any data incidents responsibly.

12. International Data Transfers

Data may be processed outside the EU in cases where service providers are located globally. In such cases, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses or adequacy decisions).

13. Complaints & Contact Information

If you have concerns or complaints about your data or this Privacy Policy, please contact us at:
📧 support@supbis.com

You may also file a complaint with your local data protection authority in accordance with the GDPR.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website. Continued use of our services constitutes acceptance of the updated terms.