Privacy Policy
WikiGazette — Iron Monarch LLC
Last updated: June 2026
1. Information We Collect
We collect the following personal data: (a) Account information — your email address and full name when you register; (b) Document content — the HTML files you upload and their associated metadata (title, author, category, publication date); (c) Organization branding — organization name, website, and icon that you optionally provide; (d) Usage data — view counts and analytics for your hosted documents; (e) Payment data — subscription tier and billing status, processed securely by Stripe (we do not store your card details); (f) Technical data — IP address, browser type, and access timestamps collected automatically when you use the Service.
2. Legal Basis for Processing
We process your personal data under the following legal bases: (a) Performance of a contract — processing your account information, uploaded documents, and subscription data to provide the Service you requested; (b) Legal obligation — retaining billing records as required by applicable tax and financial laws; (c) Legitimate interest — collecting usage analytics to improve and secure the Service; (d) Consent — processing any optional data you voluntarily provide, such as organization branding.
3. How We Use Your Data
We use your personal data to: operate and maintain your account; host, store, and display your uploaded documents; process subscription payments and manage your plan; track document views and provide analytics to you; communicate with you about your account, security updates, and service changes; and prevent fraud, abuse, and unauthorized access to the Service.
4. Data Sharing and Sub-Processors
We do not sell your personal data. We share data only with the following service providers who act as our sub-processors: (a) Stripe — processes subscription payments under their PCI-compliant infrastructure; (b) Google — provides authentication via Google OAuth and email infrastructure; (c) Cloud hosting and storage providers — host your uploaded documents and application data. Each sub-processor is bound by data protection agreements and processes data only on our instructions. We may disclose data to law enforcement if required by law.
5. International Data Transfers
Your personal data may be processed in countries outside the European Economic Area (EEA), including the United States. We ensure such transfers are protected through Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms recognized by GDPR. Our sub-processors have committed to these safeguards as well.
6. Data Retention
We retain your personal data only as long as necessary: (a) Account data — kept while your account is active and deleted within 30 days of account closure; (b) Uploaded documents — retained while your account is active, or until you delete them; (c) View analytics — retained for a rolling period and aggregated over time; (d) Billing records — retained for the period required by applicable tax laws (typically 7 years). When you delete a document, it is removed from our systems within 30 days.
7. Your GDPR Rights
Under the GDPR, you have the following rights: (a) Right of access — request a copy of your personal data; (b) Right to rectification — correct inaccurate or incomplete data; (c) Right to erasure ('right to be forgotten') — request deletion of your account and associated data; (d) Right to restrict processing — limit how we process your data; (e) Right to data portability — receive your data in a structured, machine-readable format; (f) Right to object — object to processing based on legitimate interests; (g) Right to withdraw consent — withdraw consent for data processing based on consent at any time. To exercise any of these rights, contact us at support@wikigazette.com.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including encrypted data transmission (TLS), secure password hashing, access controls, and regular security reviews. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. We will notify you and the relevant supervisory authority of any data breach within 72 hours of becoming aware of it, as required by GDPR Article 33.
9. Children's Privacy
The Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will promptly delete it.
10. Cookies and Tracking
We use essential cookies necessary for the Service to function (such as authentication sessions). We do not use cookies for targeted advertising. Any non-essential analytics or tracking technologies require your prior consent, which you may withdraw at any time.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Continued use of the Service after changes constitutes acceptance of the updated policy. The 'Last updated' date below reflects the most recent revision.
12. Contact and Supervisory Authority
If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us at support@wikigazette.com. You also have the right to lodge a complaint with your local Data Protection Authority (DPA) if you believe our processing of your personal data violates the GDPR.
Privacy questions?
To exercise your data protection rights or ask about how we handle your data, email us at any time.
support@wikigazette.com