Privacy Policy — srovera studio

1. Data Controller Identity

srovera studio, operated by Solim Rovera, acts as the primary Data Controller under Regulation (EU) 2016/679 (General Data Protection Regulation / GDPR) for personal data collected across this website (`srovera.com`) and all associated studio products (including TerraLedger, Kiaqoo, and TimeLedger).

For any privacy inquiries or to exercise statutory data rights, contact us at: solim@srovera.com.

2. Zero Tracking on Studio Website

This website (`srovera.com`) operates without tracking cookies, advertising identifiers, or intrusive third-party analytics scripts. Visiting this website does not trigger cookie consent banners under the EU ePrivacy Directive because no non-essential cookies or tracking technologies are stored on your device.

3. Data Processing Across Studio Products

When you use applications engineered by srovera studio, personal data is processed strictly to deliver essential functionality:

Authentication & Account Data: Email addresses, hashed password credentials, and security verification data processed via Supabase Auth and WebAuthn standards.
Application State & Records: Property records, financial valuations, time logs, or price reporting uploaded explicitly by users.
Transactional Communications: Service emails dispatched via authenticated subprocessor APIs (e.g. Resend, Twilio Verify).

4. Trusted Subprocessors

To maintain cloud operations, srovera studio contracts with reputable infrastructure providers bound by strict Data Processing Agreements (DPAs):

Cloudflare Inc. — Edge DNS hosting, security headers, and static site delivery.
Supabase Inc. — Managed PostgreSQL database infrastructure and identity authentication (Frankfurt, EU region).
Stripe Inc. — PCI-compliant payment gateway and subscription processing.
Resend Inc. — Transactional email notification delivery.
Twilio Inc. — SMS multi-factor authentication (MFA).

5. Your Rights Under GDPR

Under Articles 15 through 22 of the GDPR, you hold the following rights regarding personal data processed by srovera studio:

Right of Access (Art. 15): Request full confirmation and copies of personal data held.
Right to Rectification (Art. 16): Correct inaccurate or incomplete user profile fields.
Right to Erasure / "Right to be Forgotten" (Art. 17): Demand permanent purge of user accounts and associated records.
Right to Data Portability (Art. 20): Request automated machine-readable data exports (JSON format).

To submit a request, email solim@srovera.com using your registered account email. Requests are fulfilled within 30 days without fee.

6. Updates to This Policy