Privacy Policy

1. Who We Are

buy-it.gr Services is operated by:

2. What Data We Collect

• Account information: Your name and email address, collected when you sign up via Clerk.
• Service data: Which services you subscribe to, registered IP addresses for streaming licenses, and subscription status.
• Payment information: Payments are processed by Creem.io. We do not store card numbers or payment credentials.
• Usage data: Subscription activity and timestamps, used to manage your account and services.

3. How We Use Your Data

• To provision and manage your subscribed services (domains, hosting, streaming licenses).
• To manage your account and billing.
• To communicate with you about your account, service updates, or support requests.
• To comply with legal obligations under applicable EU and Greek law.

4. Third-Party Services

• Clerk (clerk.com) — Authentication and user account management. Clerk handles sign-up, login, and session management. Your email and credentials are stored and managed by Clerk. See Clerk's Privacy Policy.
• Creem.io — Payment processing and subscription management. Creem.io acts as the merchant of record for all transactions. Your payment is processed by Creem.io, who issues your receipt and handles billing. You can manage or cancel subscriptions directly through the Creem.io customer portal. We do not store your card details. See Creem.io's Privacy Policy.
• Cloudflare — Infrastructure and global delivery. The Service runs on Cloudflare Workers. See Cloudflare's Privacy Policy.

All third-party providers are contractually bound to process your data only as instructed and in compliance with applicable data protection laws.

5. Data Retention

• Account data is retained for as long as your account is active and for a reasonable period thereafter as required by law.
• Subscription and service data is retained for billing and legal compliance purposes.
• You may request deletion of your account and data at any time (see Section 6).

6. Your Rights (GDPR)

As a resident of the European Economic Area, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your personal data.
• Restriction — request that we limit how we use your data.
• Portability — request your data in a portable format.
• Objection — object to processing based on legitimate interests.

To exercise any of these rights, contact us at info@buy-it.gr. We will respond within 30 days.

7. Cookies

We use only essential cookies required for authentication (session cookies set by Clerk). We do not use tracking or advertising cookies.

8. Data Security

We implement appropriate technical and organisational measures to protect your data, including HTTPS encryption in transit and access controls. However, no system is completely secure — please use a strong password and keep your credentials safe.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes by email. Continued use after changes are posted constitutes acceptance.

10. Contact