Privacy Policy

We explain what data we collect, why, and how we protect it in line with the GDPR.

Last updated: 2026-06-13

1. Data controller

The controller of personal data is RectraSolutions (registration data pending), contact: rectrasolutions@gmail.com. This policy covers data processed in connection with using rectrasolutions.com.

2. What data we process

Account data: name (optional) and email address.

Payment data: handled solely by Stripe. We do not store card numbers - we only receive a customer identifier and payment status.

Technical data: IP address, browser type and basic logs necessary for operating and securing the Service. Learning progress is stored locally in the browser (localStorage) and is not sent to the server.

3. Purposes and legal bases

Providing the service and managing the account and subscription - Art. 6(1)(b) GDPR (performance of a contract).

Billing and tax obligations - Art. 6(1)(c) GDPR (legal obligation).

Security, abuse prevention and pursuing claims - Art. 6(1)(f) GDPR (legitimate interest).

4. Recipients and processors

We entrust data to trusted providers acting as processors: Supabase (database hosting and authentication), Stripe (payments) and the application hosting provider (Vercel).

Some providers may process data outside the European Economic Area. In such cases, transfers are based on Standard Contractual Clauses approved by the European Commission.

5. Retention period

Account data is kept for the lifetime of the account. Billing data - for the period required by tax law. After account deletion, data is deleted or anonymised, except for data we must retain by law.

6. Your rights

You have the right to access, rectify, erase, restrict processing of, port and object to your data. To exercise these rights, write to rectrasolutions@gmail.com.

You also have the right to lodge a complaint with a supervisory authority - in Poland this is the President of the Personal Data Protection Office (PUODO).

7. Cookies

We use cookies necessary for the Service to function (e.g. maintaining the session and login) - these are always on. The rest fall into two purposes, consented to separately in the cookie banner. Analytics: Google Analytics, solely to measure traffic and improve the Service, with IP anonymisation. Marketing: the Meta pixel (Facebook, Instagram), which measures how our ads perform and lets us show them to people who have visited the Service - this involves profiling for advertising purposes, and the recipient of the data is Meta Platforms Ireland Ltd. You may consent to one, both or neither. Without your consent the tool in question is not loaded. You can change or withdraw consent at any time via “Cookie settings” in the Service footer - withdrawing is exactly as easy as giving consent.

8. Contact

For any matters concerning personal data, contact us at rectrasolutions@gmail.com.