Privacy Policy

This policy applies to all visitors and subscribers of asix.live. If you are located in the European Economic Area (EEA), the United Kingdom, or California, additional rights described below apply to you.

We collect only what is necessary to provide the service:

• Account data — your email address, collected when you create an account.
• Subscription data — your subscription status, plan, and billing period. Payment card details are processed and stored by Stripe, Inc. — we never see or store raw card numbers.
• Usage data — which products you are subscribed to and when you access them. We do not track detailed in-app behaviour at this time.
• Technical data — IP address and browser type, collected automatically by our infrastructure providers (Vercel, Supabase) for security and performance purposes.

• To create and manage your account
• To process subscription payments via Stripe
• To deliver the products you are subscribed to
• To send transactional emails (subscription confirmations, receipts)
• To detect and prevent fraud or abuse

We do not sell your data to third parties. We do not use your data for advertising.

We share your data only with the following service providers, under contract:

• Supabase — authentication and database hosting (US servers). Your email address and subscription records are stored here.
• Stripe, Inc. — payment processing. Stripe stores your billing information under their own privacy policy.
• Vercel — web hosting and edge network. Access logs may include IP addresses.

We use only essential cookies and browser storage required for the service to function:

• Authentication cookies — set by Supabase to maintain your login session. These are strictly necessary; the service cannot function without them.
• Checkout cookies — set by Stripe during the payment flow to secure the transaction. These are strictly necessary for completing a purchase.
• Cookie consent preference— stored in your browser's local storage (key: asix-cookie-consent) to remember that you have acknowledged this banner. No personal data is stored.

We do not use advertising, analytics tracking, or third-party marketing cookies.

We retain your account data for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we are legally required to retain certain records (for example, financial transaction records for tax purposes, which we retain for 7 years).

Depending on your location, you have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion (GDPR Art. 17 / CCPA) — delete your account and all personal data immediately via your account settings, or email us to request manual deletion. Billing records are exempt under Art. 17(3)(b) and retained for 7 years for tax compliance.
• Portability — receive your data in a machine-readable format.
• Opt-out of sale (CCPA) — we do not sell personal information, so this right is already satisfied.

To exercise any of these rights, email us at privacy@asix.live. We will respond within 30 days.

We use industry-standard security measures including TLS encryption in transit, row-level security on our database, and service-role-key isolation for server-side operations. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

Our services are not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy from time to time. We will update the "Last updated" date at the top and, for material changes, notify you by email.

For privacy-related questions or to exercise your rights, contact us at privacy@asix.live.