CourseDrawPrivacy policy
Last updated: 31 July 2026
This policy describes how KF Starck Enterprises AB processes personal data when you use CourseDraw.
Controller
KF Starck Enterprises AB, company reg. no. 559124-4495, email support@starck.link, is the controller of personal data processed in CourseDraw.
Data we process
Account details (name, email, password hash), account name/slug, memberships, course plans and folders synced to the cloud, technical logs needed for operations and troubleshooting, usage statistics (client: browser, Windows, or macOS, time in the app, visits, logins, exports, prints, and Equipe uploads, linked to your user id), and payment-related status linked to your account. Card details are handled by Stripe — we do not store full card numbers. We do not use a third-party analytics tool.
Purposes and legal bases
We process data to provide your account, sync and store course plans, manage subscriptions and payments, provide support, and improve and secure the service. The legal bases are primarily performance of a contract (terms and subscription), legitimate interest for operations and security, and legal obligation where required by law (e.g. accounting). Support staff may view an account’s course plans and folders when needed to help you.
Payments
Subscriptions and payments are processed by Stripe. Stripe acts as a processor/provider for payment data under their terms. We store Stripe customer and subscription IDs and status to control access to the service.
Recipients and providers
Personal data may be shared with providers needed to operate CourseDraw, such as payment processing (Stripe), hosting, and operations. They process data under agreement and applicable data protection law.
Storage, security, and transfers
Data is stored with our providers in the EU/EEA where practicable. If transfer occurs outside the EU/EEA, it is done with appropriate safeguards under GDPR (e.g. EU Standard Contractual Clauses). Passwords are hashed. Access to production systems is restricted.
Retention
Account data and course plans are kept while the account is active. When an account is deleted, we erase or anonymize personal data within a reasonable time unless we must retain it longer by law (e.g. accounting). Request deletion via support@starck.link.
Your rights
You may request access, rectification, erasure, restriction, and portability, and object to certain processing under GDPR. Contact support@starck.link. You may also lodge a complaint with the Swedish Authority for Privacy Protection (IMY) or your local supervisory authority.
Cookies
The marketing site generally uses only necessary technical cookies and local storage (e.g. language preference). The app (web and desktop) sends usage statistics to our own server for operations, as described above. Any separate analytics or marketing tools will be listed here if introduced.
Changes
We may update this privacy policy. The latest version is published on this page. Material changes will be communicated via the website or email when reasonable.