Privacy Policy

1. Introduction

This Privacy Policy explains how Birta ("Birta", "we", "us", "our"), the web publishing and hosting service at https://birta.dev (the "Service"), collects, uses, shares, and protects your personal data, and what rights you have.

The Service is operated by SP Krou Tech.

For personal data we collect about you as a visitor or user of the Service, we act as the data controller. This Policy does not apply to third-party coding agents, AI tools, or other software you use to create content before publishing it through Birta — those are governed by their own privacy terms.

2. Information We Collect

Account data. Your email address when you create an account, and basic account settings.

Your content. The sites you publish through the Service, including files, version history, project names, and configuration such as custom domain settings. Published sites are publicly accessible by default.

Payment data. Payments are processed by Polar Software, Inc., our Merchant of Record. Polar Software, Inc. and its payment processors collect and process your payment card details — we never receive or store them. We receive from Polar Software, Inc. only the information needed to run your subscription, such as your plan, transaction status, and billing country. Polar Software, Inc. processes your data under its own privacy policy.

Support communications. Messages you send to our support, together with the context needed to help you (for example, the page or site the message relates to).

Technical and usage data. Basic information needed to operate and secure the Service: request logs (IP address, timestamps, requested URLs, status codes, browser type), authentication events, and aggregate feature-usage data.

Visitor analytics for your sites. When people visit sites you publish, we collect basic request data (such as IP-derived approximate location, referrer, page views, and browser type) and show it to you as aggregated statistics for your own sites.

Cookies. We use strictly necessary cookies to keep you signed in and secure the Service, and may use analytics cookies to understand how the Service is used. You can control cookies in your browser settings; blocking strictly necessary cookies will prevent the Service from working.

We do not knowingly collect sensitive personal data (such as health, biometric, or political information) and ask that you do not submit it to us.

3. How We Use Your Information

We use the data described above to:

• create and secure your account and authenticate you;
• host, serve, and deliver the sites you publish, and provide features such as version history, custom domains, and visitor analytics;
• process subscriptions and payments;
• respond to your support requests;
• monitor, protect, and improve the Service, and prevent fraud, abuse, and security incidents;
• send you service-related communications (such as important notices about your account, security, or changes to our terms), and — only with your consent — occasional product news, from which you can unsubscribe at any time;
• comply with legal obligations.

Where laws such as the EU/UK GDPR apply, we rely on the following legal bases: performance of our contract with you (providing the Service), our legitimate interests (security, abuse prevention, service improvement), your consent (optional communications and non-essential cookies), and compliance with legal obligations.

We do not sell your personal data. We do not use your content or your personal data to train artificial-intelligence or machine-learning models, and we do not share them with AI model providers for training.

4. How We Share Information

We share personal data only with:

• Service providers that help us operate the Service — such as cloud hosting and content delivery, transactional email delivery, error monitoring, analytics, and customer support tools — under agreements that limit how they may use the data;
• Polar Software, Inc., our Merchant of Record, for payment processing, tax handling, receipts, and transactional support;
• Authorities and other parties where required by law — to comply with a binding legal obligation or valid legal process, to enforce our Terms of Service, or to protect the rights, property, or safety of Birta, our users, or the public;
• A successor entity if we are involved in a merger, acquisition, or sale of assets, in which case the receiving party will be bound by commitments no less protective than this Policy.

Sites you publish are public by default: anything you include in a published site is visible to anyone who has its address.

5. Published Sites and Your Visitors

If you publish a site that itself collects personal data from its visitors (for example, through forms or embedded tools), you are the one responsible for that data: for having a legal basis to collect it, for informing your visitors, and for complying with the privacy laws that apply to you. Server logs and aggregated visitor analytics that we generate when serving your site are processed by us to operate the Service and to provide you with statistics.

6. International Transfers

We operate globally and use cloud infrastructure and service providers that may store or process data in countries other than your own. Where required by applicable law, we use appropriate safeguards for such transfers, such as contractual data-protection commitments with our providers, encryption in transit and at rest, and access controls.

7. Data Retention

We keep your personal data for as long as your account is active and as needed to provide the Service. If you delete your account, we delete your personal data and published sites within a reasonable period (normally within 30 days), except for data we must keep longer to comply with legal obligations (such as billing records), resolve disputes, or enforce our agreements, and residual copies in encrypted backups and security logs that are purged on a rolling basis.

8. Your Rights

Depending on where you live (including under the EU/UK GDPR and the California Consumer Privacy Act), you may have the right to: access the personal data we hold about you and receive a copy; correct inaccurate data; delete your data; restrict or object to certain processing; data portability; and withdraw consent at any time (without affecting processing that happened before withdrawal). We do not discriminate against you for exercising these rights.

To exercise any of these rights, email us at [email protected]. We will verify your request and respond within the timeframe required by applicable law. You can also delete your account yourself, which takes your published sites offline and triggers deletion as described in Section 7. If you are in the EU/UK or another jurisdiction with a data-protection authority, you also have the right to lodge a complaint with your supervisory authority.

9. Security

We use technical and organizational measures designed to protect your data, including encryption in transit (TLS), encryption at rest for stored data, and access controls. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security. Please keep your account credentials safe and notify us at [email protected] if you suspect unauthorized access.

10. Children

The Service is not directed to children and may not be used by anyone under 18 years of age (or the age of majority in their jurisdiction, whichever is higher). We do not knowingly collect personal data from children; if we learn that we have, we will delete it and close the associated account.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date above, and for material changes we will notify you by email or through the Service before the change takes effect. Your continued use of the Service after a change takes effect constitutes acceptance of the updated Policy.

12. Contact

Questions about this Policy or your personal data: [email protected]