Privacy

Last updated: [date]

Who is responsible

[legal name and address] is responsible for your data. Write to support@mynotekit.com with any question about it.

What we collect, and why

• Your email address and name, to deliver your order, log you in and contact you about it.
• Your notes and questionnaire answers, to build your kit.
• Your study plan progress, to show it to you when you return.
• Payment records, to keep the accounts we are legally required to keep. Stripe handles your card details, and we never see them.
• Your consent to immediate delivery, as evidence that you gave it.
• Technical records such as your IP address, to protect the site from abuse.

We use your data to perform our contract with you (GDPR Art. 6(1)(b)), to meet legal duties such as accounting (Art. 6(1)(c)), and to keep the site secure (Art. 6(1)(f)).

Please leave special categories of personal data, such as health information, out of the notes you send.

Who we share it with

• Cloudflare, for hosting, the database and file storage. Our data is stored in Europe where Cloudflare supports this.
• Stripe, for payments.
• Resend, for sending email.
• [AI tool and its company], to help draft your kit. It does not use your notes to train its models. [Confirm once the tool is chosen]

Some of these companies are based in the USA. Transfers rely on [EU-US Data Privacy Framework or standard contractual clauses, confirm for each company].

We do not sell your data, and we do not use advertising trackers on this site.

How long we keep it

• Unpaid orders and their files: deleted after 48 hours.
• Your uploaded notes: deleted [X] days after your kit is delivered.
• Your kit and account: kept until [how long the kit stays available], or until you ask us to delete them.
• Accounting records: 7 years, as Austrian law requires. [Confirm]
• Backups: up to 14 days after deletion from the live site.

Cookies

We use one cookie, which keeps you logged in. It is required for the site to work and is removed when you log out or after 30 days.

Customers under 18

Many of our customers are school students, so we collect only what a kit needs. [Confirm the approach for minors with a lawyer]

Your rights

You can ask us for a copy of your data, and ask us to correct it, delete it, restrict its use or transfer it. You can also object to its use. Write to us and we will answer within one month.

You can complain to the Austrian data protection authority, the Datenschutzbehörde.