Useful data.
Nothing extra.

The data controller is the Award.vibe operator identified in the Legal Notice, at checkout and on your receipt. Privacy requests can be sent to support@freescale.site.

• Account data: email address, encrypted authentication records, first name, selected profile and preferred AI tool.
• Purchase data: payment status, product, amount, currency, transaction identifiers and the email associated with the order. Complete payment-card details are handled by Stripe, not Award.vibe.
• Usage and security data: access events, request metadata, approximate network information, privacy-protected identifiers, error and anti-abuse logs.
• Support data: your contact information and the content of messages you send.
• Device storage: essential session information, interface preferences and guide progress stored in cookies or local storage.

We process account and purchase data to create and secure accounts, complete the contract, deliver paid content, connect purchases to the correct user, recover access and provide support. We process transaction records where required for accounting, tax and fraud-prevention obligations.

We use proportionate technical and security data for our legitimate interests in maintaining service reliability, measuring essential product use, preventing abuse and protecting users. Optional marketing will require a separate lawful basis and unsubscribe mechanism if introduced.

Access is limited to the Award.vibe operator and service providers that need the data to perform their role:

• Stripe processes checkout, payment, fraud-prevention and refund information.
• Supabase provides authentication and database infrastructure.
• Vercel hosts the website, server functions and operational logs.
• Email providers deliver verification, recovery, receipt and support messages.

These providers process data under their own privacy terms and/or data-processing commitments. We do not sell personal data.

Some providers may process data outside your country. Where data protected by the EEA or UK rules is transferred internationally, we rely on an adequacy decision, recognised data-privacy framework or appropriate contractual safeguards supplied by the provider, as applicable.

• Account and entitlement data is kept while your account or purchased access remains active, then deleted or anonymised when no longer needed, subject to legal records.
• Purchase and invoice records may be retained for up to 10 years where required by accounting or tax law.
• Support conversations are normally retained for up to 3 years after the last exchange.
• Security and rate-limit logs are retained only for the period reasonably required to investigate abuse and protect the service.
• Local guide progress remains on your device until you clear browser storage.

Longer retention may apply where necessary to establish, exercise or defend legal claims.

Award.vibe uses storage necessary for authentication, security, navigation state and guide progress. These functions are required to provide the requested service. We do not currently use third-party advertising cookies. If non-essential analytics or marketing technologies are introduced, the relevant information and consent controls will be added before activation where required.

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent where processing relies on consent. You may also request account deletion or correction through support@freescale.site. We may need to verify your identity before completing a request.

If you believe your request has not been handled properly, you may complain to your local data-protection authority. In France, this is the CNIL.

We use access controls, secure transport, server-side secrets, signed payment webhooks, password protection and rate limiting designed to reduce unauthorised access. No online service can guarantee absolute security. If an incident creates a material risk to you, we will provide notice as required by law.

The service is not directed to children under 16 and we do not knowingly create accounts for them. Contact us if you believe a child has provided personal data without appropriate authorisation.

We may update this policy to reflect changes in the service, providers or law. The current version and effective date appear above. Material changes will be communicated through the service or by email where appropriate.