DVO7

Privacy Policy

Last updated: 5 July 2026

This policy explains what personal data DVO7 ("we", "us") collects, why, and what you can do about it. DVO7 is operated by [LEGAL ENTITY], [BUSINESS ADDRESS]. If you have questions, email [PRIVACY EMAIL].

1. Who this applies to

It applies to everyone who uses dvo7.com. If you are in the EU/EEA or UK, we act as a "data controller" under the GDPR / UK GDPR and you have the rights listed in section 7.

2. What we collect

  • Account data: email address, username, and a hashed password (we never store your password in plain text).
  • Authentication data: if you sign in with Google, GitHub, or another provider, we receive your email and basic profile from that provider.
  • Subscription & billing: your plan, subscription status, and payment history. Card details are handled entirely by Stripe — we never see or store your full card number.
  • Your content: the gear you add to your studio inventory, service/repair history, calibration logs, patches, and other data you choose to save.
  • API usage: if you use the developer API, we log which endpoints your key calls and credit usage.
  • Technical data: IP address, browser type, and pages visited, collected for security (rate limiting, abuse prevention) and analytics.

3. Why we use it (legal bases)

  • To provide the service — running your account, storing your studio data, delivering documents (contract).
  • To take payment — processing subscriptions and one-off purchases (contract).
  • To keep the platform secure — rate limiting, fraud/abuse prevention, admin auditing (legitimate interest).
  • To improve DVO7 — privacy-respecting analytics (legitimate interest; see cookies below).
  • To contact you — service emails always; marketing emails only if you opt in (consent).

4. Who we share it with

We do not sell your personal data. We share it only with the processors that make the service work:

  • Stripe — payment processing.
  • Lulu / print-on-demand partners — only when you place a physical order (name and shipping address).
  • Reverb and other market data sources — used to price gear; we send them no personal data about you.
  • Mautic — email/newsletter delivery, if you subscribe.
  • Matomo — self-hosted, privacy-respecting analytics.
  • Our email provider — to send you account and service emails.

We may also disclose data if legally required (court order, lawful request).

5. Where your data is stored

Our application and database are hosted in [HOSTING REGION]. Some processors (e.g. Stripe) may process data outside your country under appropriate safeguards (such as EU Standard Contractual Clauses).

6. How long we keep it

We keep your account data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except records we must keep for legal or accounting reasons (e.g. invoices).

7. Your rights

You can, at any time:

  • Access the personal data we hold about you.
  • Correct data that is wrong.
  • Delete your account and associated personal data.
  • Export your data in a portable format.
  • Object to or restrict certain processing.
  • Withdraw marketing consent (unsubscribe link in every marketing email).

To exercise any of these, email [PRIVACY EMAIL]. EU/UK users also have the right to complain to their local data protection authority.

8. Cookies & analytics

We use a small number of strictly necessary cookies to keep you logged in and to protect the site. Analytics is handled by self-hosted Matomo, configured to respect your Do-Not-Track setting and to avoid sharing data with third parties.

9. Security

Passwords are hashed with bcrypt. Traffic is served over HTTPS. Access to administrative functions is restricted and rate-limited. No system is perfectly secure, but we take reasonable measures to protect your data.

10. Children

DVO7 is not directed at children under 16, and we do not knowingly collect their data.

11. Copyright / DMCA

DVO7 archives technical documentation under fair-use and right-to-repair principles. Rights holders may submit takedown requests to [DMCA EMAIL]; see our Terms of Service for the full process.

12. Changes

We may update this policy. If we make material changes we will note the new "last updated" date and, where appropriate, notify you by email.

Privacy Policy · Terms of Service · Home