Privacy Policy

Who we are

This Privacy Policy is provided by Adeyoju Stephen ("we", "us", or "our"), the data controller for the personal data collected through Bestseller Lab.

What personal data we collect

• Identity and contact data: name, email address, and account login credentials.
• Usage data: how you interact with our tools, pages visited, and feature usage.
• Device and technical data: IP address, browser type, device identifiers, and operating system.
• Support data: messages and files you send to customer support.
• Payment data: our payment provider Paddle processes payment details. We do not store full card numbers.

How we use your data

• To create and manage your account and provide our services.
• To process payments, subscriptions, and invoicing.
• To maintain security, prevent fraud, and verify identity.
• To respond to support requests and improve our platform.
• To send service-related notifications and optional marketing (where consent is given).

Legal basis for processing

We process your personal data on the following legal bases:

• Contract performance: to deliver the services you have signed up for.
• Legitimate interests: for security, fraud prevention, and platform improvement.
• Consent: for optional marketing communications and non-essential cookies.
• Legal obligation: where required by applicable law.

Who we share data with

We only share your data with trusted third parties when necessary:

• Paddle — our Merchant of Record for payment processing, subscription management, tax compliance, and invoicing.
• Service providers — hosting, analytics, and customer support tooling.
• Professional advisers — legal and accounting professionals, when required.
• Authorities — where disclosure is required by law or regulation.

Data retention

We retain your personal data for as long as your account is active or as needed to provide our services. After account closure, we delete or anonymise your data within a reasonable period, except where retention is required for legal, tax, or regulatory purposes.

Your rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your personal data.
• Restrict or object to certain processing.
• Request data portability.
• Withdraw consent at any time (where processing is based on consent).

To exercise these rights, contact us at the email listed in your account settings. We will respond within one month.

Security

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit, access controls, and regular security reviews.

Cookies

We use essential cookies to keep you signed in and maintain your session. We may use analytics cookies to understand how our platform is used. You can manage cookie preferences through your browser settings.

Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the platform.