For the purposes of applicable data protection law (including the EU and UK GDPR), the controller of your personal information is Myicons Ltd.

If you have any questions about this Policy or how we handle your data, you can contact us at myicons.co@gmail.com.

This Policy applies to personal information we process about:

• visitors to our website (myicons.co);
• customers who purchase or subscribe to a Myicons plan;
• Licensed Users and team members who activate or use the Myicons plugin or web library;
• people who contact us for support or other inquiries.

This Policy does not apply to third-party websites or services that we do not control, even if they link to or from our Services.

3.1. Information You Provide to Us

• Account information — your email address and, where provided, your name, and the password or credentials used to access your account.
• Order and subscription information — the plan you purchase, the number of seats, your license key, and your billing/transaction history.
• Team and invitation information — when you invite team members to your license, we collect the email addresses you provide so we can deliver their license access.
• Communications — information you provide when you email us, request support, or otherwise contact us.

3.2. Payment Information

We do not collect or store your full payment card details. Payments are processed by our payment provider, Lemon Squeezy, which acts as merchant of record. We receive limited transaction data (such as confirmation of payment, order identifiers, and the license key associated with your order). Please review Lemon Squeezy's own privacy policy for how it handles your payment data.

3.3. Information We Collect Automatically (License and Device Data)

To deliver the Services and to enforce the seat and usage limits of your license, we collect technical information when you activate and use the Myicons plugin or web library, including:

• a device identifier ("principal") that we derive and store in a hashed, pseudonymized form to count and manage the seats associated with your license;
• plugin and web-library activation and session data, including license activation events and seat assignments;
• your IP address, browser type, operating system, and Figma client information;
• general usage data, such as which features are used and when.

We use this information to verify that use of a license stays within the seats and limits that were purchased, to detect and prevent abuse, fraud, and unauthorized sharing, and to operate and improve the Services.

3.4. Cookies and Similar Technologies
Our website uses cookies and similar technologies to keep you signed in, remember your preferences, and understand how the website is used. See Section 6 below for details.

We use personal information for the following purposes, relying on the legal bases indicated:

• To provide the Services— create and manage your account, deliver your license key, assign and manage seats, and operate the plugin and web library. Legal basis: performance of a contract.
• To process payments and manage subscriptions— through our payment provider. Legal basis: performance of a contract; legal obligation.
• To enforce our agreements and prevent abuse — verify license usage stays within purchased limits, and detect fraud, unauthorized sharing, or other violations of the License Agreement. Legal basis: legitimate interests in protecting our rights and our products.
• To communicate with you — send transactional messages (such as license keys, invitations, renewal and account notices) and respond to support requests. Legal basis: performance of a contract; legitimate interests.
• To improve the Services — analyze usage trends and improve features, performance, and security. Legal basis: legitimate interests.
• To send marketing — only where you have opted in or where permitted by law; you can unsubscribe at any time. Legal basis: consent; legitimate interests.
• To comply with the law — meet legal, tax, and accounting obligations and respond to lawful requests. Legal basis: legal obligation.

We do not sell your personal information. We share it only as described below:

• Service providers (sub-processors) — we share data with trusted providers who process it on our behalf, under contract and only as needed to deliver the Services. Our key sub-processors are:
• Lemon Squeezy — payment processing, subscription, and license-key management;
• Resend — delivery of transactional emails (license keys, invitations, account notices);
• our cloud hosting and database providers — to host the Services and store account, license, and seat data.
• Legal and safety — we may disclose information where required by law, to comply with legal process, to enforce our agreements, or to protect the rights, property, or safety of Myicons, our users, or others.
• Business transfers — if Myicons is involved in a merger, acquisition, financing, reorganization, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.

We use cookies and similar technologies (such as web beacons and pixels) to operate and secure the website, remember your preferences, and measure usage. Most browsers let you refuse or delete cookies; disabling some cookies may affect how parts of the website work.

Because no uniform "Do Not Track" standard has been adopted, our Services do not currently respond to Do-Not-Track browser signals.

We operate online and may process and store personal information in countries other than the one in which you live, including outside the European Economic Area and the United Kingdom. Where we transfer personal information across borders, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses, to protect your information.

We keep your personal information for as long as your account or subscription is active and for as long as needed to provide the Services. After that, we retain information only as long as necessary to:

• comply with our legal, tax, and accounting obligations;
• resolve disputes and enforce our agreements; and
• maintain business and security records.

When we no longer have a legitimate need to process your personal information, we delete or anonymize it, or, where that is not immediately possible (for example, in backups), securely store and isolate it until deletion is possible.

We keep your personal information for as long as your account or subscription is active and for as long as needed to provide the Services. After that, we retain information only as long as necessary to:

• comply with our legal, tax, and accounting obligations;
• resolve disputes and enforce our agreements; and
• maintain business and security records.

When we no longer have a legitimate need to process your personal information, we delete or anonymize it, or, where that is not immediately possible (for example, in backups), securely store and isolate it until deletion is possible.

We implement appropriate technical and organizational measures designed to protect personal information, including pseudonymization of device identifiers and encryption of sensitive credentials at rest. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on where you live, you may have some or all of the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you;
• Rectification — ask us to correct inaccurate or incomplete information;
• Erasure — ask us to delete your personal information;
• Restriction — ask us to limit how we process your information;
• Objection — object to processing based on our legitimate interests;
• Portability — receive your information in a portable format;
• Withdraw consent — withdraw consent at any time where we rely on it, without affecting prior processing.

To exercise any of these rights, email us at myicons.co@gmail.com. We will respond as required by applicable law. If you are in the European Economic Area or the UK and believe we have processed your information unlawfully, you also have the right to lodge a complaint with your local data protection authority.
California residents. If you are a California resident, you may have additional rights under California law, including the right to know what personal information we collect, the right to request deletion, and the right not to be discriminated against for exercising your rights. We do not sell your personal information. To make a request, contact us at myicons.co@gmail.com

The Services are not directed to children. We do not knowingly collect personal information from anyone under 18 years of age. If you believe a minor has provided us with personal information, please contact us at myicons.co@gmail.com and we will take reasonable steps to delete it.

The Services are not directed to children. We do not knowingly collect personal information from anyone under 18 years of age. If you believe a minor has provided us with personal information, please contact us at myicons.co@gmail.com and we will take reasonable steps to delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the "Effective Date" above, and, if the changes are material, we will provide a more prominent notice. We encourage you to review this Policy periodically.

Email: myicons.co@gmail.com