Privacy Policy

1. What we collect

When you create an account, Supabase Auth securely manages your email address and login credentials, while DravoraX stores the profile and account details needed to provide the service. When you submit a support request, we store the details you provide. We do not collect payment card details directly; any payment provider you use has its own privacy policy.

2. How we use it

We use your information to provide and support the services you request, respond to support tickets, process account activity, and keep the site secure. We do not sell your data.

3. Cookies

We use secure, same-site authentication cookies to keep you logged in. A short-lived password-recovery marker is HTTP-only. We do not use tracking cookies for advertising. Your theme, cart, and display-currency preferences are stored locally in your browser. If you are signed in, the selected currency is also saved to your DravoraX profile so it can follow your account across devices.

4. Security

Password handling and session issuance are delegated to Supabase Auth. Customer records are protected with row-level database policies, sensitive actions are rate-limited and audited, and private files are delivered through short-lived links. No system is perfectly secure, but we apply layered safeguards and review them as the service evolves.

5. Your rights

You can export your customer-account data or request account deletion from the Account section of the dashboard. You may also contact support for help with access, correction, or deletion.

6. Contact

Questions about this policy can be sent through the DravoraX support page.