Privacy Notice
Last updated: April 2026
1. Controller
The data controller is Francisco Serrano Baptista. For contact details, see our Impressum.
2. What We Collect
We collect the following personal data:
- Account data: Name and email address (via Clerk authentication)
- Purchase data: Email, order history, and payment metadata (via Stripe)
- Usage data: Pages visited, browser type, and IP address (server logs)
3. Why We Collect It
We process your data for the following purposes:
- Contract performance: To deliver purchased products and provide account access
- Legitimate interest: To improve our services and prevent fraud
- Consent: To send marketing emails (only with your explicit opt-in via Bulbul)
4. Third-Party Processors
We use the following processors to operate the shop:
- Stripe (payments) — processes payment data under their own privacy policy
- Clerk (authentication) — processes account data
- Cloudflare (file storage, CDN) — stores and delivers digital products
- Railway (hosting) — hosts the application and database
- Bulbul (email) — sends transactional and marketing emails
5. Data Retention
Account and purchase data is retained for as long as your account exists and for up to 10 years after for tax and legal compliance. You may request deletion at any time (see below).
6. Your Rights (GDPR)
If you are in the EU/EEA, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Request erasure ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Withdraw consent at any time
To exercise any of these rights, contact us at francisco@franciscobaptista.com. We will respond within 30 days.
7. Cookies
We use essential cookies for authentication and session management. We do not use tracking or advertising cookies.
8. Changes
We may update this notice. Material changes will be communicated via email or a notice on the site.