Legal

Privacy Policy

Last updated: 30 May 2026

1. Who we are

Gemly ("we", "us", "our") operates the Gemly search service. This Privacy Policy explains what personal data we collect, why, and what rights you have under the General Data Protection Regulation (GDPR). Gemly is operated from the Netherlands.

2. Data we collect

When you create an account we collect your name, email address, and country. When you use Gemly we store your search history, credit balance, and referral information. Payments are processed by Stripe; we do not store your full card details. We may also collect basic technical data such as approximate location (to localise results) and usage logs.

3. Why we use your data

We use your data to provide the service (identifying items and returning localised results), to manage your account and credits, to process payments through Stripe, to send transactional emails such as welcome and account notifications, and to improve and secure the service.

4. Legal basis

We process your data on the basis of performing our contract with you (providing the service you signed up for), your consent (where applicable, such as optional communications), and our legitimate interests (keeping the service secure and improving it).

5. Sharing your data

We share data only with service providers that help us operate Gemly: Supabase (authentication and database), Vercel (hosting), Resend (email delivery), and Stripe (payments). These providers process data on our behalf under data processing agreements. We do not sell your personal data, and we do not show third-party advertising based on your data.

6. Data retention

We keep your account data for as long as your account is active. When you delete your account, your profile and associated data are permanently removed from our systems. Some limited records may be retained where required by law, for example for payment or tax purposes.

7. Your rights

Under the GDPR you have the right to access, correct, or delete your personal data, to restrict or object to processing, and to data portability. You can delete your account at any time from your account page. For any other request, contact us and we will respond within the period required by law. You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. International transfers

Some of our providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

9. Cookies

Gemly uses essential cookies and similar technologies needed to keep you logged in and to operate the service. We do not use advertising or third-party tracking cookies.

10. Changes

We may update this policy from time to time. Material changes will be communicated through the app or by email.

11. Contact

For privacy questions or to exercise your rights, contact us at hello@gemly.org.