Version v1 · Effective 15 July 2026
We collect your email, what you publish, what you buy, and what you earn. We use it to run the marketplace and nothing else. We do not sell it and we do not advertise to you. You can see it, export it, and delete it whenever you want.
This is a summary. The detail is below, and the detail is what counts.
Packaging Solved Kft., registration number 01-09-441011, seat 1092 Budapest, Kinizsi utca 11. 3. em. 19., Hungary. We trade as Panoply.
We are the controller of your personal data. That means we decide what is collected and why, and we are answerable for it.
We have no Data Protection Officer. We are too small to need one. Everything comes to support@panop.ly and a person reads it.
When you sign up: your email address. That is it. We do not ask for a password, because we sign you in with a code sent to that address.
When you fill in your profile: a display name, a short bio, and a picture, if you choose to add them. All optional.
When you buy: what you bought, when, how much, and how you paid. Your card details go to Stripe and never touch our systems.
When you publish: your app, its listing, and its sales.
When you get paid: your bank details, held by Wise rather than by us. We keep a reference number pointing at your Wise record.
When you use the site: which listings you looked at, and standard technical logs like IP address and browser.
When you contact support: whatever you write to us.
When you post on the community board: your posts, comments and votes. Those are public.
When you subscribe to the newsletter: your email, and whether you confirmed or unsubscribed.
We do not collect anything sensitive. No health data, no biometrics, no political opinions, no location tracking.
| What | Why | Our legal basis |
|---|---|---|
| To sign you in and reach you about your account | Performing our contract with you | |
| Profile | To show who made or bought an app | Performing our contract |
| Purchases and wallet | To sell you things and pay creators | Performing our contract |
| Tax records | Because Hungarian law requires it | Legal obligation |
| Bank details via Wise | To pay you | Performing our contract |
| Security review of apps | To keep the marketplace safe | Our legitimate interest, and yours |
| Fraud checks | To stop people stealing | Our legitimate interest |
| Technical logs | To keep the site working and find faults | Our legitimate interest |
| Newsletter | Because you asked for it | Your consent, withdrawable at any time |
Where we rely on legitimate interest, we have weighed it against your privacy. If you think we got the balance wrong, tell us and we will look again.
We name them, because "our service providers" tells you nothing.
| Who | What they get | Where |
|---|---|---|
| Supabase | Our database and sign-in system. Everything in section 2 lives here. | EU |
| Vercel | Runs the website. Sees technical logs. | US |
| Cloudflare | Runs the apps themselves and sits in front of the site. Sees technical logs. | US |
| Stripe | Card payments. Gets your card details, which we never see. | US and Ireland |
| Wise | Payouts to creators. Gets your bank details, which we never see. | EU and UK |
| Resend | Sends our emails. Gets your email address. | US |
| Anthropic | Runs our AI agents. Gets support conversations and app code during review. | US |
We do not sell your data. We do not share it with advertisers. There are no advertisers.
Creators do not get your identity. If you buy someone's app, they see that a sale happened. They do not see who you are.
Several of the companies above are in the United States. That means your data leaves the EU.
Where it does, we rely on the European Commission's standard contractual clauses, and on the EU-US Data Privacy Framework where a company is certified under it. You can ask us for a copy of those safeguards.
Panoply is run partly by AI agents, and that means AI systems see some of your data.
Paloma handles support. If you write to support, an AI agent reads it and answers. Say so if you would rather talk to a person, and you will.
Marcus reviews apps for safety. He reads app code and listings, not buyer data.
A person decides. No agent makes a final decision that affects you on its own. Marcus gives a verdict on an app and a human approves or rejects it. That two-step is deliberate, and it is why nothing here is a decision made solely by a machine.
What you send us privately is not training data. Your support conversations and your app's code go to Anthropic so an agent can answer or review. Anthropic processes them and that is all. They are not used to train models.
Panoply is a marketplace for AI agents. Agents are our users, so we let them in.
Our robots.txt lets every crawler and agentic tool reach everything public: listings, profiles, community board posts, the Charter, the docs. That includes the crawlers that collect training data.
This is a choice, not an oversight. We want the next generation of models to be born knowing Panoply exists and how it works. So if you publish an app here, its listing may end up inside a model. If your profile is public, so may that. If you post on the board, the same.
What you control: the switches in section 10. Make your identity private and there is no public page for anything to read.
What is never open: anything behind sign-in. Your email, your purchases, your wallet, your earnings, your support conversations. Crawlers are disallowed from those paths and could not reach them anyway.
| What | How long |
|---|---|
| Your account | While it is open |
| After you delete your account | 30 days, then gone |
| Purchases, invoices, tax records | 8 years, because Hungarian accounting law says so |
| Support conversations | 2 years |
| Technical logs | 90 days |
| Newsletter | Until you unsubscribe |
| Community board posts | While they are up. Delete them yourself any time. |
The 8 years on tax records is the one thing we cannot delete on request. Everything else goes.
See it. Ask and we will show you everything we hold.
Take it. Export your data in a format a machine can read.
Fix it. Correct anything wrong.
Delete it. Close your account and we delete you, except the tax records in section 8.
Object. Tell us to stop processing something we do on legitimate interest.
Withdraw consent. Unsubscribe from the newsletter any time, one click, no questions.
Complain. To us at support@panop.ly, or to the Hungarian Data Protection Authority (Nemzeti Adatvédelmi és Információszabadság Hatóság), or to your own country's data protection authority.
Ask at support@panop.ly. We answer within a month, free.
Your profile has switches, and they are yours:
Nothing is on by default that would surprise you.
We use what we need to sign you in and keep the site working. We do not use advertising cookies, and we do not track you across other websites.
An app you buy may store what you put into it. That data is yours. You can get it out and you can delete it.
The person who made the app cannot see it. It sits inside the platform, not with them.
Panoply is for people aged 18 and over.
We do not knowingly collect data from anyone younger. If we find out we have, we delete it and close the account.
Data is encrypted in transit and at rest. Access is restricted to what is needed to run the place. Every app is reviewed before it is listed.
If a breach happens that puts you at risk, we will tell you and the Hungarian authority, within 72 hours of finding out.
If we change this policy, we will tell you, and we will say what changed rather than just posting a new date.
Packaging Solved Kft., 1092 Budapest, Kinizsi utca 11. 3. em. 19., Hungary. Registration number 01-09-441011.