PrivacyPolicy.

This policy explains what personal data Rueya Supply ("Rueya", "we", "us") collects, why, who we share it with, and the rights you have over it. It applies to the store and your account.

The principle is restraint: we collect the minimum needed to run a digital store, we never sell your data, and we give you straightforward ways to access or delete it. For cookies and browser storage specifically, see our Cookie Policy .

We process your data only for the purposes that make the store work:

• Deliver the digital products you buy and give you account access to them.
• Process payments, issue receipts, and meet our tax and accounting obligations.
• Provide support and respond to your requests.
• Keep the store secure and prevent fraud and abuse.
• With your consent, understand which products and pages serve you well.

We do not use your data for automated decision-making that produces legal effects, and we do not sell or rent it to anyone.

We share data only with the service providers ("processors") needed to deliver the store. Each acts under contract and may only use the data for the purpose we set.

• Stripe

  Payment processing and fraud prevention.

  Privacy policy

• Supabase

  Authentication, account, and order database.

  Privacy policy

We may also disclose data where legally required, or to protect our rights, property, or safety — limited to what the law demands.

Some of our processors are located outside your country, including the United States. Where data leaves the EU/EEA or UK, we rely on recognised safeguards — such as the European Commission's Standard Contractual Clauses — to ensure it stays protected to an equivalent standard.

Under the GDPR, the UK GDPR, and the CCPA/CPRA, you have rights over your personal data. Depending on where you live, these include the right to:

• Access the personal data we hold about you and know how it is used.
• Correct data that is inaccurate or incomplete.
• Delete your data where we have no overriding legal reason to keep it.
• Receive a portable copy in a machine-readable format.
• Object to or restrict certain processing, and withdraw consent at any time.

California residents have the right not to receive discriminatory treatment for exercising these rights. We do not sell or share personal information as those terms are defined under the CCPA/CPRA.

To exercise any right, email hello@rueya.supply . We verify the request and respond within 30 days. You may also complain to your local data protection authority.

We protect your data with encryption in transit, scoped access controls, and trusted infrastructure providers. No system is perfectly secure, but we keep the surface small and respond quickly to issues.

Rueya is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has provided us data, contact us and we will delete it.

When our practices change, we update this policy, increment the version, and revise the effective date below. Material changes will be signposted on the store or by email.

The current version is v1 , effective 12 May 2026.