CourseDraw Privacy policy
Last updated: 31 July 2026
This policy describes how KF Starck Enterprises AB processes personal data when you use CourseDraw.
Controller
KF Starck Enterprises AB, company reg. no. 559124-4495, email support@starck.link, is the controller of personal data processed in CourseDraw.
Data we process
Account details (name, email, password hash), account name/slug, memberships, course sketches and folders synced to the cloud, technical logs needed for operations and troubleshooting, and payment-related status linked to your account. Card details are handled by Stripe — we do not store full card numbers.
Purposes and legal bases
We process data to provide your account, sync and store sketches, manage subscriptions and payments, provide support, and improve and secure the service. The legal bases are primarily performance of a contract (terms and subscription), legitimate interest for operations and security, and legal obligation where required by law (e.g. accounting). Support staff may view an account’s sketches and folders when needed to help you.
Payments
Subscriptions and payments are processed by Stripe. Stripe acts as a processor/provider for payment data under their terms. We store Stripe customer and subscription IDs and status to control access to the service.
Recipients and providers
Personal data may be shared with providers needed to operate CourseDraw, such as payment processing (Stripe), hosting, and operations. They process data under agreement and applicable data protection law.
Storage, security, and transfers
Data is stored with our providers in the EU/EEA where practicable. If transfer occurs outside the EU/EEA, it is done with appropriate safeguards under GDPR (e.g. EU Standard Contractual Clauses). Passwords are hashed. Access to production systems is restricted.
Retention
Account data and sketches are kept while the account is active. When an account is deleted, we erase or anonymize personal data within a reasonable time unless we must retain it longer by law (e.g. accounting). Request deletion via support@starck.link.
Your rights
You may request access, rectification, erasure, restriction, and portability, and object to certain processing under GDPR. Contact support@starck.link. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.
Cookies
The marketing site generally uses only necessary technical cookies and local storage (e.g. language preference). Any analytics or marketing tools will be listed here if introduced.
Changes
We may update this privacy policy. The latest version is published on this page. Material changes will be communicated via the website or email when reasonable.