Privacy Policy

Who is responsible

writers.cards is operated by Orson Everaert in Belgium. For privacy requests, email orson@posteo.net.

Data we process

We process account details such as your email address and display name; projects, cards, versions and physical-card images you choose to upload; subscription identifiers and status; guest-sharing settings; and limited operational records such as recent account activity, administrative actions, billing-event status and security logs.

Why we process it

• To create and secure your account and provide the service.
• To save, synchronize, share and export your projects.
• To process subscriptions, cancellations and customer support.
• To prevent abuse, diagnose incidents and maintain the service.
• To meet legal, accounting and security obligations.

The principal legal bases are performance of our contract, compliance with legal obligations and our legitimate interest in operating a secure service. Where consent is legally required, we request it separately.

Providers

Cloudflare hosts the application, database and uploaded images. Supabase provides account authentication. Stripe processes payments and billing management. Resend may deliver transactional account email. These providers process only the data needed for their role under their own contractual and security commitments.

Sharing and international transfers

We do not sell personal data. Project content is disclosed to people only when you create and share a guest link. Some providers may process data outside Belgium or the European Economic Area using applicable transfer safeguards.

Retention

Account and project data is kept while your account remains active. Deleted projects and accounts are removed from the active service; short-lived infrastructure backups and security logs may persist for limited operational or legal retention periods. Billing records may be retained where accounting law requires it.

Your choices and rights

You can export your account data and request permanent deletion from Account settings. Depending on applicable law, you may also request access, correction, restriction, portability or object to processing. Contact us at the address above. You may lodge a complaint with the Belgian Data Protection Authority.

Security and changes

We use encrypted transport, access controls, signed sharing tokens, audit records and provider safeguards. No online system is risk-free. Material policy changes will be announced in the service or by email when appropriate.