Privacy notice
Version 2026-11-14-v1-withdrawal-v1. AT Group AB is responsible for the personal data processed for this service.
Information processed
We store your display name, selected social platform, submitted profile URL and time of profile-link confirmation, the purchase amount, order reference, payment and refund status, accepted terms version, consent to immediate performance, the wording and time of your full-performance acknowledgement, the first recorded replacement time and transaction timestamps. If you submit a withdrawal notice, we store the name, contact email and purchase reference you provide, the received time, your chosen confirmation format and the handling record. Your username and profile link are public while your profile is displayed. Payment details, such as billing and contact information, are collected and processed by Stripe; this application does not store full card details or copy the billing address or email into its own order table.
Why we process it
We use order data to carry out purchases, display the title and history, process refunds and resolve support requests. We use security records to prevent abuse and protect the service. Necessary records are retained to meet applicable bookkeeping and other legal obligations. We rely on performance of the agreement, legal obligations and legitimate interests as appropriate to each purpose.
Cookies, security & providers
We use a necessary session cookie for form security and admin access. There are no advertising or analytics trackers in this package. Short-lived rate-limit entries contain keyed hashes of connecting IP addresses, not raw IP addresses. Hosting providers may keep their own access and error logs. Stripe operates the payment page under its own privacy information. Google Fonts delivers the original design’s typefaces and receives the network data required to serve them. Social profile links connect to third-party sites only when clicked. Provider processing and international transfers must be documented for the final hosting and payment configuration before launch.
Retention & your rights
Unpaid orders are removed after 30 days by scheduled housekeeping. Security rate-limit entries expire automatically and are removed by housekeeping. Paid order records are retained for applicable accounting, support and dispute requirements. Public profile history can be hidden on request while required transaction records are retained. Contact us to request access, correction, deletion, restriction, objection or portability where applicable. You may complain to the Swedish Authority for Privacy Protection (IMY) or your relevant supervisory authority.