Privacy policy
What personal data this site collects, why, and what you can do about it. Last updated 23 September 2026.
1. Who is responsible
[Your full name], [Postal address: street, number, postcode, city, country], contact@akashavidya.com is the controller of your personal data under the EU General Data Protection Regulation (GDPR).
2. What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Your e-mail address | To log you in with a link and to run your account | Contract, Art. 6(1)(b) |
| Your saved projects (wall size, depths, wave settings, an image you upload for the waves) | So you can continue and extend your project later | Contract, Art. 6(1)(b) |
| Purchase data from the payment provider: name, e-mail, country, order number, amount (never card details) | To unlock your files, to help with problems, and for tax records | Contract and legal obligation, Art. 6(1)(b) and (c) |
| E-mails you send us | To answer you | Contract or legitimate interest, Art. 6(1)(b) and (f) |
| Newsletter, only if you sign up | News about products and updates | Consent, Art. 6(1)(a); you can unsubscribe in every e-mail |
| Technical logs of the web host: IP address, time, page | To keep the site running and secure | Legitimate interest, Art. 6(1)(f) |
Safety notices about the plans you bought are sent to buyers even without a newsletter sign-up, because they protect you.
3. In your browser
We use no advertising or tracking cookies and no analytics. The configurator keeps your settings in your browser's local storage, so they are there next time. Your login session is stored the same way. You can delete both in your browser at any time.
4. Who else processes your data
- [Web host, e.g. Netlify / Cloudflare Pages] — hosts the website.
- Supabase — login and account database, on servers in the EU [region, e.g. Frankfurt].
- [Payment provider, e.g. Stripe] — payment, as seller of record. It is responsible for the payment data it collects, under its own privacy policy.
- [E-mail service for login links and newsletter].
- Google Fonts and cdnjs (Cloudflare) — the pages currently load fonts and program libraries from them, so your browser sends them its IP address. [Remove this item once fonts and libraries are hosted on our own server]
Some of these companies are based in the USA. Transfers are covered by the EU–US Data Privacy Framework or the EU standard contractual clauses.
5. How long
Account data and saved projects: until you delete your account. Purchase records: for as long as tax and accounting law requires. Newsletter: until you unsubscribe. Host logs: a few weeks.
6. Your rights
You can ask for a copy of your data, and for it to be corrected, deleted, limited, or handed over in a common format. You can object to processing based on legitimate interest, and withdraw consent at any time. Write to contact@akashavidya.com. You can also complain to a data protection authority, in Romania the ANSPDCP (dataprotection.ro), or the one where you live.
7. Children
This site is not meant for children under 16.