Privacy Policy

Solid Technologies AG (“we,” “us,” “our,” or “Company”) is committed to protecting and respecting your privacy. This Privacy Policy describes how we collect, use, and share your personal data when you use Meme Studio (the “Service”). It also explains your rights regarding your personal data.

1. Data Controller and DPO Contact

Data Controller: Solid Technologies AG
Data Protection Officer (DPO): Lea Sommer, lea@memestudio.com

If you have any questions, concerns, or requests regarding your personal data, please contact our DPO at the email address above.

2. Data We Collect

1. Account Information: When you register for an account, we may collect personal data such as your email address and any other information you voluntarily provide.
2. User-Generated Content: When you upload images or other content, we store and process that content to provide our meme creation features.
3. Usage Data: We may automatically collect information about how you interact with our Service, including IP addresses, browser type, device information, pages visited, and timestamps.
4. Payment Information: If you opt for our paid tier, we may collect billing and payment details. Payment processing may be handled by third-party payment processors, and we do not store full credit card numbers.
5. Cookies and Similar Technologies: We use cookies and similar technologies to collect information about your interactions with our Service. For more details, please see our Cookie Policy.

3. How We Use Your Data

We use your personal data for the following purposes:

1. Service Provision: To provide, maintain, and improve the Service’s functionality, including meme creation, content storage, and related features.
2. Account Management: To manage user accounts, authenticate users, and provide customer support.
3. Communications: To send you administrative notifications, updates about the Service, and respond to your inquiries.
4. Analytics and Performance: To analyze usage patterns, improve the user experience, and develop new features.
5. Legal Obligations: To comply with legal and regulatory requirements and protect our legal interests (e.g., fraud prevention).

4. Lawful Bases for Processing

We process personal data under one or more of the following lawful bases:

1. Consent: Where you have given consent (e.g., newsletter sign-ups, certain cookie usage).
2. Contract Performance: Where processing is necessary to provide the Service as per our Terms of Service.
3. Legitimate Interests: For purposes such as improving the Service, preventing fraud, or communicating with you, as long as these interests are not overridden by your data protection rights.
4. Legal Obligation: Where we must comply with legal or regulatory obligations.

5. Data Sharing and Transfers

1. Service Providers: We may share your personal data with vendors or service providers (e.g., hosting, analytics, payment processing) who help us operate and improve the Service.
2. Firebase: Our Service is built on Firebase (Google). This may involve data transfers to the United States or other countries.
3. Legal Requirements: We may disclose your personal data if required by law, subpoena, or to protect the rights, property, or safety of us, our users, or others.
4. Business Transfers: If we are involved in a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction.

6. International Data Transfers

If you are located in the European Economic Area (EEA) or other regions with data protection laws, your personal data may be transferred to countries outside of your jurisdiction (including the United States). Where required, we use Standard Contractual Clauses (SCCs) or other mechanisms recognized under data protection laws to legitimize data transfers.

7. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations. The retention period may vary depending on the type of data and how it is used.

8. Your Rights (GDPR and Equivalent)

If you are in the EEA or another jurisdiction that grants similar rights, you have the right to:

1. Access: Request a copy of the personal data we hold about you.
2. Rectification: Request correction of any inaccurate or incomplete personal data.
3. Erasure (“Right to be Forgotten”): Request deletion of your personal data, subject to certain exceptions.
4. Restriction of Processing: Ask us to limit how we process your personal data in certain circumstances.
5. Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format.
6. Object to Processing: Object to processing based on legitimate interests or direct marketing.
7. Withdraw Consent: Withdraw any consent you have previously given.

To exercise these rights, contact lea@memestudio.com. You may also have the right to lodge a complaint with a supervisory authority if you believe we have breached applicable data protection laws.

9. Security Measures

We implement technical and organizational measures to protect your personal data against unauthorized access, loss, or alteration. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Children’s Privacy

The Service is not directed to children under 13 (or under 16 in certain jurisdictions), and we do not knowingly collect personal data from such children. If you believe a child has provided us with personal data, please contact us, and we will promptly delete such data.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the “Last Updated” date and posting the revised policy on our website. Continued use of the Service after such changes constitute acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests about this Privacy Policy, please contact our Data Protection Officer: Lea Sommer, lea@memestudio.com