GearSwitchr Data Privacy Policy

1. Scope

This Policy supplements our Privacy Policy and applies to personal data collected through our Site and related services.

2. Data We Collect

3. Storage & Security

• Data is stored on ISO 27001‑certified cloud infrastructure located in U.S. data centers.
• All data in transit is encrypted via TLS 1.3; sensitive data at rest is encrypted using AES‑256.
• Access to production databases is restricted to authorized personnel under least‑privilege principles and logged for audit.

4. Lawful Bases for Processing

We process personal data under one or more of the following bases:

• Contract – to provide the Service you request;
• Legal obligation – to comply with anti‑fraud and financial‑record requirements;
• Legitimate interest – to improve the Service, prevent abuse, and secure our platform;
• Consent – for optional marketing communications.

5. Data Sharing & Transfers

We share data only with vetted subprocessors that sign a Data Processing Agreement ("DPA") consistent with the EU GDPR and similar frameworks. A current list of subprocessors is available upon request.

International transfers outside the U.S. are protected by Standard Contractual Clauses or another recognized transfer mechanism.

6. Your Controls

• Download your data – Export your account history from Account Settings → Data & Privacy.
• Delete your data – Request permanent deletion via Account Settings → Data & Privacy. We will honor deletion requests within 30 days unless retention is required by law.
• Cookie preferences – Manage cookie categories at any time via the cookie banner or your browser.

7. Breach Notification

In the unlikely event of a data breach that is likely to result in a high risk to your rights and freedoms, we will notify affected users and relevant supervisory authorities without undue delay and within 72 hours where feasible.

8. Changes

We may revise this Policy periodically. Material changes will be announced via email and an in‑app banner at least 14 days before they take effect.

9. Contact

For data‑protection inquiries, contact our Privacy Team: