Privacy — Rainframe Studio
Who is responsible
The controller is José Covas Education Academy, Lda, a Portuguese private limited company (sociedade por quotas), company and tax number (NIPC) 519 093 500, with registered office at Avenida Engenheiro Duarte Pacheco, Torre 1, Piso 2, Escritório 10, 1070-101 Lisboa, Portugal. Privacy contact: academy@josecovas.com. Telephone: +351 962 802 463.
What we store
We do not create an account on this site and we do not run a marketing list. We do not sell personal data and we do not use it to train AI models. We do not use analytics cookies or a third-party analytics script on this site.
To deliver your download after payment, our server asks Paddle whether the transaction identifier from your checkout is paid and matches this product, then issues a time-limited download link (24 hours, up to 5 downloads). We keep a delivery record for that transaction (transaction identifier, issue time, download count, and a revoked flag) so we can honour the limit and, later, stop a download after a refund. Legal basis: performance of the contract (GDPR art. 6(1)(b)) and legal accounting duties (art. 6(1)(c)). Sales records are kept for the period required by Portuguese law, generally 10 years.
Purchases
If you buy a pack, the order is processed by our online reseller Paddle.com (Paddle.com Market Limited), the Merchant of Record for all our orders. Paddle collects your payment details, email, country and billing data and acts as an independent controller for payment, tax (VAT/GST), invoicing, fraud prevention and receipts; see Paddle’s privacy notice. Card details go to Paddle, never to us. Paddle shares with us only what we need to deliver the file and handle refunds and support (typically email, country, order/transaction identifier, amount).
Hosting
This site is hosted on Cloudflare Pages. Cloudflare, as our hosting and security processor, may process technical data for each request (IP address, user-agent, URL, time, status code) to deliver the page and prevent abuse, usually for no more than 30 days unless an incident must be investigated. Legal basis: legitimate interest in keeping the site available and safe (GDPR art. 6(1)(f)). Transfers outside the EEA rely on an adequacy decision (for example the EU-US Data Privacy Framework, where certified) or standard contractual clauses.
Your rights
You may request access, rectification, erasure, restriction, portability (where applicable), object to processing based on legitimate interest, and withdraw consent. These rights are not absolute. Write to academy@josecovas.com. You may also lodge a complaint with the Portuguese supervisory authority, the CNPD (cnpd.pt).
Age
The service is not directed at people under 16 and we do not knowingly ask them for data.