Privacy Policy

Last updated: 17 September 2026

This policy explains what personal data we collect when you use Targeted Visualization, why we collect it, and what rights you have over it. We keep it short on purpose.

Who is responsible for your data

We are the data controller for the personal data described below.

What we collect

• Account details — your email address and a password. Passwords are stored only as a cryptographic hash by our authentication provider; we never see or store your actual password.
• Your activity in the service — which recordings you mark as favourites, any notes or feedback you write, and basic playback events (which recording was played, for how long). This is how we learn which recordings work and which do not.
• Technical records — our hosting provider keeps standard server logs, which include your IP address, browser type and the time of each request, for security and troubleshooting.

We do not collect health data, we do not ask you why you are listening to a particular recording, and we do not build advertising profiles.

Why we use it, and on what legal basis

• To give you an account and let you use the service — necessary to perform our contract with you.
• To keep your favourites and notes available to you — necessary to perform our contract with you.
• To understand which recordings are useful and improve them — our legitimate interest in developing the service.
• To keep the service secure and prevent abuse — our legitimate interest in protecting it.
• To take payment, once paid plans exist — necessary to perform our contract with you.

Who else processes it

We use a small number of service providers, who process data only on our instructions:

• Supabase — accounts, authentication, favourites and notes. Hosted in the European Union.
• Our web hosting provider — serving the website and the audio files, and server logs.
• Stripe — payment processing, once paid plans are introduced. Stripe handles card details directly; we never receive or store your card number.

We do not sell your personal data, and we do not share it with anyone for their own marketing.

Where it is stored

Your account data is stored in the European Union. Where a provider processes data outside the EU/EEA, that transfer is covered by the European Commission's Standard Contractual Clauses.

How long we keep it

We keep your account data for as long as your account exists. If you ask us to delete your account, we delete your account data and your notes, normally within 30 days. Server logs are kept for a short period for security purposes. We may keep records we are legally required to keep, such as invoices, for the period the law requires.

Your rights

Under the GDPR you have the right to: access your data; correct it; have it deleted; restrict or object to how we use it; receive a copy in a portable format; and withdraw consent at any time where we relied on consent. To exercise any of these, email contact@targetedvisualization.com and we will respond within one month.

If you believe we have handled your data badly, you may complain to the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro.

Cookies

We use only what is strictly necessary to make the site work: a session cookie that keeps you signed in, and local storage in your browser that remembers your session and your interface preferences. We do not use advertising or third-party tracking cookies, so we do not show a cookie banner.

Children

This service is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

Changes

If we change this policy we will update the date at the top of this page, and tell you by email if the change is significant.