Legal
Privacy Policy
Effective 30 June 2026
This policy explains what personal data Drawing Academy collects, why we collect it, and the choices you have. The data controller is SAFEX-EU S.R.L. (P.IVA 10011171211), Largo Francesco Torraca 71, 80133 Napoli (NA), Italia. We collect only what we need to deliver the products you've purchased and improve the experience.
Data we collect
Account data (email address, password hash, optional display name). Purchase data (products bought, amount, currency, timestamp). Technical data (IP address, browser, basic analytics about pages visited). Communications you send us by email.
Why we collect it
To create and secure your account, deliver and re-deliver your purchased files, send transactional emails (receipts, password resets, important account notices), provide customer support, comply with tax and accounting obligations, and improve the service.
Legal basis
We process your data either to perform our contract with you (account, downloads, support), to comply with a legal obligation (tax, accounting), or based on your consent (optional newsletter).
Payments
Payments are processed by Stripe. We do not see or store your full card number — only a token and the last four digits returned by Stripe. Their privacy practices are described at stripe.com/privacy.
Subprocessors
We use a small set of vendors to run the service: Stripe (payments), Supabase / Lovable Cloud (database, authentication, file storage), and our transactional email provider. Each is bound by their own privacy commitments.
Newsletter
If you subscribe to our newsletter, we store your email to send occasional updates. You can unsubscribe at any time using the link in every email.
Cookies
We use a minimal set of cookies needed for sign-in and to remember your session. See the Cookie Policy for details.
Retention
Account and purchase data are kept for as long as your account is active. Invoice data is retained for the period required by applicable tax law (typically up to 10 years). You can request deletion at any time, subject to those obligations.
Your rights
You can request access, correction, export or deletion of your personal data, and you can object to or restrict certain processing. Email amministrazione@safexeusrl.com and we will respond within 30 days.
International transfers
Our infrastructure providers may process data outside your country. When they do, they rely on appropriate safeguards such as Standard Contractual Clauses.
Children
The service is intended for users 16 years and older. We do not knowingly collect data from children under 16.
Changes
We will update the effective date at the top of this page when this policy changes. Material changes will also be announced by email when appropriate.
Contact
Privacy questions: amministrazione@safexeusrl.com.