Privacy Policy

The data controller for Advea is Leo Larsson, Swedish sole trader operating Advea.

Data we process

Account details, authentication/session data, subscription and entitlement state, Stripe references, expert-pack installation metadata, short-lived checkout/download grants, withdrawal requests and limited technical/security logs.

Providers

Supabase provides authentication/database infrastructure, Stripe provides billing/tax infrastructure and Vercel provides web hosting and delivery.

Retention

One-time download grants expire after one hour and checkout correlation tokens after 30 minutes. Other records are retained only as needed for service, security and legal obligations.

Your rights

Applicable GDPR rights may include access, correction, deletion, restriction, objection, portability and complaint to IMY.

Last updated 12 August 2026.