Privacy Notice

IP BlackBone Tech (ИП BlackBone Tech) (BIN/IIN 950326300505), Seifullin street 498/1, Almaty 050000, Kazakhstan, trading as "copylayers", is the controller of the personal data described in this notice. We decide why and how your data is processed. Contact us at iqetsstyle@gmail.com.

• Account data — email address, name or display name, avatar, login credentials and sign-in provider. Used to create and secure your account and to provide the service. Legal basis: performance of a contract.
• Purchase and entitlement data — subscription status, purchased assets, order identifiers. Used to give you access to what you paid for and to support you. Legal basis: performance of a contract. Card and billing details are collected and processed by Paddle, not by us.
• Content you create — saved assets, favourites, and material you upload. Used to operate the features you use. Legal basis: performance of a contract.
• Support messages — the content of your emails and requests. Used to answer you. Legal basis: legitimate interests in supporting customers.
• Usage and technical data — pages viewed, actions taken, device and browser information, IP address, log data. Used for security, fraud prevention, troubleshooting and improving the product. Legal basis: legitimate interests.
• Marketing data — newsletter subscription and preferences, where you opt in. Legal basis: consent, which you can withdraw at any time.

• Service providers / subprocessors — hosting, database, storage, email delivery and analytics providers that operate the platform on our instructions.
• Paddle.com — our Merchant of Record, for the sale of our products, subscription management, payments, tax compliance, invoicing and refunds.
• AI processing providers — where a feature sends content to a third-party AI model to generate or translate asset metadata.
• Professional advisers — legal and accounting advisers, where necessary.
• Authorities — where we are required to disclose by law.

We do not sell your personal data.

Our providers may process data outside Kazakhstan, including in the EEA, the UK and the United States. Where data leaves your region, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

We keep account and content data for as long as your account is active. After you delete your account, we delete or anonymise personal data within a reasonable period, except where we must retain records for legal, tax or accounting purposes (typically up to the statutory retention period). Log and security data is kept for a limited period and then deleted.

Subject to applicable law, you have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. You can delete your account and data directly from your dashboard, or write to iqetsstyle@gmail.com. We respond within one month. If you are in the UK or EEA, you also have the right to complain to your local supervisory authority.

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, role-based permissions and row-level security on our database. No system is perfectly secure, but we work to keep risk low and to respond quickly to incidents.

We use essential cookies and local storage to keep you signed in, remember your language and theme, and secure the service — these are required for the site to work. We may also use limited analytics cookies to understand how the product is used. You can clear or block cookies in your browser settings; blocking essential cookies will break sign-in and purchases.

We may update this notice as the product evolves. The date at the top of this page shows when it was last revised.