WaveHub

Privacy Policy

Information pursuant to the GDPR. Last updated: [date]

1. Controller

[Company / name], [address], email markus.prenner@gmx.at [or support@…]. See also the Legal Notice.

2. What data we process

• Account data: name/username, email address, password (stored only as a hash).
• Usage data: login times, chosen membership, settings, technical log/device information.
• Payment data: processed via Stripe. WaveHub stores no card data — only payment/subscription status, customer and subscription ID.
• Communication: emails and support requests.

3. Purposes & legal bases

• Providing the membership & processing payments — Art. 6(1)(b) (contract).
• Legal retention obligations (e.g. invoices) — (c).
• Security, abuse prevention, product improvement — (f) (legitimate interest).
• Newsletter/marketing — (a) (consent), revocable at any time.

4. Recipients / processors

We use carefully selected processors (data processing agreements are in place):

• Supabase — database, authentication, hosting of app data.
• Stripe — payment processing & subscription management.
• Resend — sending transactional emails (e.g. confirmations).
• Vercel — hosting of the website and application.
• Mailchimp — newsletter/marketing emails (if you subscribe).

Some services may process data in third countries (e.g. the USA); transfers are based on the EU Standard Contractual Clauses or an adequacy decision.

5. Cookies & local storage

Technically necessary cookies/local storage for login sessions (no consent required). [If analytics/tracking is used: add it here and add a cookie-consent banner.]

6. Retention

We store personal data only as long as necessary for the stated purposes or required by statutory retention periods. After account deletion, data is deleted or anonymised unless a retention obligation applies.

7. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, as well as the right to withdraw consent. Requests to markus.prenner@gmx.at [or support@…].

Right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority, dsb.gv.at.