ThemePages.ai
Privacy Policy
How ThemePages.ai processes personal data under GDPR and applicable Austrian/EU data protection rules.
Last updated: September 18, 2026
Waitlist, Seller And Buyer Applications At A Glance
Personal email addresses are welcome. An email address, IP address or submitted account handle is not proof of identity or account ownership. No identity document is requested in these initial forms.
| Activity | Data | Purpose and legal basis |
|---|---|---|
| Waitlist request | Email address; optional username; request timestamp and status. | Record and respond to your request for access. Article 6(1)(b) GDPR: steps requested before a potential contract. |
| Seller application | Email address, Ads / My Page / Both, owner / reseller selection, submitted account handles, receipt time and review status. | Review the opportunity and respond to you. Article 6(1)(b) GDPR: requested pre-contractual steps. |
| Buyer application | Email address, Ads / Instagram Pages / Both, own-business / client selection, submitted requirements, indicative USD budget, receipt time and review status. | Review and respond to the buying enquiry you requested. Article 6(1)(b) GDPR: requested pre-contractual steps. |
| Security and request context | IP address, browser/user-agent and referring page where recorded by the intake endpoint; request limits and technical logs. | Protect the service against abusive or duplicate requests. Article 6(1)(f) GDPR: our legitimate interest in a secure, reliable service. |
| Application email | Recipient, application summary where relevant, send status and email-provider reference. | Send the requested confirmation and notify the operator for review. Article 6(1)(b) GDPR; technical delivery protection under Article 6(1)(f). |
Application email is sent through Resend. An application does not enroll you in unrelated marketing, approve you as a seller, or start a paid service. Separate identity, authority and payment checks may apply before transaction features become available.
1. Controller
Robin Ekren, Bogengasse 2 Vorderhaus, 2630 Ternitz, Austria, is the controller for personal data processed through ThemePages.ai unless a specific feature names another controller.
For privacy requests, contact robinekrenn@gmail.com.
2. Personal Data We Process
- Account and contact data such as name, email address, username, phone number where provided, login events and account settings.
- Usage, device and security data such as IP address, browser, timestamps, pages viewed, consent records and abuse-prevention signals.
- Creator, brand, campaign, listing, waitlist and communication data submitted through the platform.
- Payment and invoice metadata processed through payment and accounting providers. We do not store full card numbers.
- Social-platform data only where a user connects an account or otherwise authorizes access through the relevant platform flow.
3. Purposes And Legal Bases
- To provide the platform, waitlist, marketplace, creator and campaign functions.
- To perform contracts and pre-contractual steps requested by users.
- To comply with tax, accounting, fraud-prevention and legal-retention duties.
- To protect platform security, prevent abuse and enforce terms.
- To send transactional messages and, where permitted, product or launch updates.
- To improve product performance based on legitimate interests or consent where required.
4. Processors And Recipients
We may use hosting, database, analytics, email, payment, accounting, customer-support and infrastructure providers where required to operate the service. These providers process data only under appropriate contractual and security obligations.
Payment services are handled by Stripe or another named payment provider when enabled. Accounting data may be processed in sevdesk or equivalent bookkeeping systems. Official tax and authority records may be shared where legally required.
5. International Transfers
Some providers may process data outside Austria or the European Economic Area. Where this happens, we rely on appropriate safeguards such as adequacy decisions, Standard Contractual Clauses or another lawful transfer mechanism.
6. Retention
We keep personal data only as long as needed for the stated purposes. Waitlist records are used while your access request remains open; seller applications are used during review and necessary follow-up. You can ask us to remove a request using the contact above. Legal claims or mandatory retention duties may require limited records to be retained after closure. A waitlist entry alone is not an invoice or an accounting record.
Accounting, invoice and transaction records may be retained for at least seven years where Austrian law requires it. Retention of security and support records depends on the incident, ongoing request, applicable limitation periods and legal duties; it is not an unlimited permission to retain all data.
7. Your Rights
Subject to the GDPR and applicable law, you may request access, rectification, deletion, restriction, portability or objection. Where processing is based on consent, you may withdraw consent for the future. You may also lodge a complaint with the Austrian Data Protection Authority.
9. Security
We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse and alteration. No system can be guaranteed perfectly secure, but security issues are reviewed and handled with priority.
10. Email And Notification Choices
ThemePages sends account-security and service messages that are necessary to verify accounts, protect users, process bookings, report payment or payout status, handle delivery, refunds and disputes, and provide requested platform functions. These required service messages cannot be disabled while the relevant account or transaction remains active.
An application confirmation is a response to your request, not consent to unrelated advertising. Optional promotional messages require a separate lawful basis. You may contact us to withdraw consent or object to optional messages.
Where Notification Settings are available, a choice is effective only after a successful save. If saving fails, contact us using the address above; do not assume an unsaved toggle applies across devices. Delivery providers may retain technical delivery, bounce and complaint metadata for security, abuse prevention and reliable delivery.