Privacy Policy

PA Ventures GmbH Görresstraße 10 80798 München Germany

Email: contact@pa.ventures Phone: +49 89 28777723

PA Ventures GmbH operates BuilderBooks and decides how the data described here is processed.

Email address. Given when you buy a skill, claim the free skill, or sign in to your library with a magic link.

Order data. Which skills you bought, the amount paid, the Stripe session and payment reference, and the time of purchase.

Delivery data. Magic links and download tokens, their expiry, and whether a download has been used.

Email delivery events. Whether a delivery email was sent, delivered, bounced, or failed.

Usage events. Pageviews, scroll depth, install-page tab selections, and outbound link clicks, stored with an anonymous ID and a session ID.

We do not collect your name, address, or payment card data. Card data goes to Stripe and never reaches our servers.

To perform the contract (Art. 6(1)(b) GDPR): processing your order, delivering the files, keeping your library accessible, and answering support requests.

To comply with legal obligations (Art. 6(1)(c) GDPR): retaining invoices and tax-relevant records.

On our legitimate interest (Art. 6(1)(f) GDPR): product analytics in aggregate to understand which pages and skills work, and to keep the site secure and free of abuse.

Supabase: database, file storage, and authentication. Stores your email address, orders, download tokens, and usage events.

Stripe: payment processing and checkout. Receives your email address and the order details, and handles all card data under its own privacy policy.

Resend: transactional email. Receives your email address to send the purchase, delivery, and sign-in emails.

Cloudflare: hosting and delivery of the website. Processes connection data such as IP addresses for the purpose of serving the site securely.

Each of these acts as a processor on our instructions under a data processing agreement. Where data is transferred outside the EU, the transfer is covered by the EU Standard Contractual Clauses.

We run our own analytics inside our Supabase database. There is no Google Analytics, no advertising pixel, and no cross-site tracker.

We store events such as which pages you viewed, how far you scrolled, which install tab you selected, and which outbound links you clicked. Each event carries a random anonymous ID kept in your browser and a session ID that expires when your session ends. Neither identifies you by name. Once you buy or sign in, purchase events are linked to your email address so that we can tell how many buyers actually install a skill.

We do not use advertising or tracking cookies, so there is no consent banner.

Your browser's local storage holds: your cart contents, your last selected install tab, and the anonymous and session IDs used for analytics. Your sign-in session is stored by Supabase in your browser so that you stay signed in to your library. Clearing your browser storage removes all of it.

Order and invoice data: ten years, as required by German commercial and tax law.

Account and library data: for as long as your library exists, so that you can re-download what you bought. Deleted on request.

Magic links and download tokens: they expire automatically and are cleared shortly afterwards.

Usage events: 24 months, then deleted.

Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. You can withdraw consent at any time where processing is based on consent.

Write to contact@pa.ventures and we will handle it. You also have the right to lodge a complaint with a supervisory authority, for us that is the Bayerisches Landesamt für Datenschutzaufsicht.

Traffic runs over TLS. Files are held in private storage and served only through short-lived, single-purpose download tokens. Database access is restricted with row-level security so that one customer cannot read another customer's records.

We update this policy when the product changes. The date at the top always reflects the current version.