Privacy policy for file accounts

10. Privacy and GDPR

Controller: ChiptuningLab, contact.chiptuninglab@gmail.com. We process: account email and name, billing details you type, IP and login logs, job metadata, message text, payment references from Stripe or PayPal. Purposes: to run the contract (art. 6(1)(b) GDPR), invoices and tax (art. 6(1)(c)), security and abuse prevention (art. 6(1)(f)). We do not sell personal data and we do not run advertising cookies. Essential cookies keep the session and language. Processors: Stripe, PayPal, our email transport, and the cloud host of the site. You may ask for access, rectification, erasure, restriction, portability or objection at contact.chiptuninglab@gmail.com. You may complain to the Romanian DPA (ANSPDCP). We keep account and invoice data for the legal accounting term; job files only as long as the service needs them.