Privacy Policy

Glopzi is a software-as-a-service product operated from Mexico. You can reach us through our contact page.

• Account data: email address (required for license delivery and account recovery).
• Payment data: handled entirely by Lemon Squeezy. We receive only metadata (plan, subscription status, customer ID), never card numbers.
• Usage data: the domain names where your license is activated.
• Support data: contents of messages you send us.
• Logs: IP addresses and request timestamps, retained for security and debugging (maximum 30 days).

• To provide and operate the Service (performance of contract).
• To process payments and comply with tax obligations (legal obligation).
• To prevent fraud and abuse (legitimate interest).
• To send service-related emails (performance of contract).
• To send product updates and offers if you opted in at signup (consent). You can unsubscribe at any time via the link in any marketing email or by contacting us. Unsubscribing does not affect transactional emails (license keys, receipts, support replies).

• Lemon Squeezy (payments, as Merchant of Record, US): processes payment data under their own privacy policy.
• Supabase (database + hosted functions, US/EU): stores account and license data.
• Resend (transactional email, US): delivers service emails like license keys and receipts.
• Cloudflare R2 (asset storage): stores animation bundles.
• Vercel (editor hosting): hosts the editor UI you use.
• Google Tag Manager and Google Analytics (analytics, US): used on our public landing pages (glopzi.com) to understand traffic and improve the site. You can opt out using the Google Analytics Opt-out Browser Add-on.

Your data may be processed outside your country. We rely on standard contractual clauses and our providers’ compliance frameworks.

The public landing pages (glopzi.com) use Google Tag Manager to load analytics scripts (Google Analytics), which set first-party analytics cookies. These help us measure traffic and improve the site.

The editor and dashboard use essential cookies only (authentication, session). We do not use advertising or cross-site tracking cookies anywhere in the product.

Account and license data are kept for the life of your account plus 12 months after cancellation (for fiscal and tax compliance). Log data is deleted after 30 days.

Depending on your jurisdiction (EU, UK, California, Brazil, and others), you may have the right to:

• Access your data.
• Correct inaccurate data.
• Delete your data.
• Port your data to another provider.
• Object to processing.
• Withdraw consent.

To exercise any right, send a message through our contact page with the subject [Privacy Request]. We respond within 30 days.

Glopzi is not intended for children under 16. We do not knowingly collect data from children.

We may update this policy. Material changes will be communicated by email.

When a Glopzi customer embeds our runtime on their website, visitors of that website download runtime assets from our CDN. In the course of delivering those assets, our infrastructure providers (such as Cloudflare and Vercel) may log technical metadata including IP addresses, user agents, and timestamps for security, abuse prevention, and debugging purposes.

Glopzi does not identify, track across sites, profile, or market to those visitors. Our customer acts as the data controller for the visitors of their own site and is responsible for obtaining any consents required under applicable law. A Data Processing Agreement (DPA) is available on request for customers that require one for their own compliance needs.

Reach us through our contact page. We respond within 2 business days.