Privacy policy
1. Data controller
The Crownly platform ("Crownly", "we") is operated by Packtum Digital Kft., 1136 Budapest, Hegedűs Gyula utca 24. 1. em. 1. ajtó, which is the data controller for personal data processed on this site. Contact: info@crownly.app. This notice describes how we handle personal data under Regulation (EU) 2016/679 (GDPR).
2. Data we process
Account data: name, email address, country, date of birth, profile photo. Usage data: projects you create or work on, offers, messages exchanged in project chats, uploaded design files and portfolio references. Payment data: amounts and dates of payments, refunds and payouts. Card details and the identity and bank details of designers are handled only by Stripe; we do not see them. Technical data strictly necessary to operate the service (authentication cookies, security logs).
3. Purpose and legal basis
We process data to operate the marketplace (contract performance): managing accounts, projects, offers, communication, file delivery, payments and payouts; to send transactional notifications about your projects; to meet accounting and tax duties (legal obligation); and, only with your consent, marketing communications. We do not sell personal data.
4. Patient data
Scans must be uploaded without patient names or other identifying data. If a file still contains patient data, the ordering laboratory or clinic is its controller and Crownly processes it only on their behalf, as a processor.
5. Processors
We use these processors to provide the service: • Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Dublin 2, Ireland (stripe.com) • Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA (cloudflare.com) • Convex, Inc., San Francisco, USA (convex.dev); data stored in the EU (Ireland) • Resend, Inc., San Francisco, USA (resend.com) Transfers to providers outside the European Union (USA) rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
6. Retention
Account data is kept while your account is active. If you delete your account, it is deactivated and the email address is released; project records remain visible to their other participants as part of contract performance. Payment records are kept for 8 years under the Hungarian Accounting Act (Act C of 2000, section 169). Input files uploaded by customers are deleted after the project closes; delivered designs are kept as evidence for disputes.
7. Your rights
You may request access to, rectification or erasure of your personal data, restriction of or objection to processing, and data portability. You may lodge a complaint with your supervisory authority. In Hungary this is the National Authority for Data Protection and Freedom of Information (NAIH, naih.hu).