This policy explains what personal data Her Frontier collects, how we use it, and what rights you have. We aim to keep it short and honest.
The data controller is Olly Kovalieva, operating as Her Frontier, Lisbon, Portugal. Contact: olly@herfrontier.ai. This policy applies wherever you live: we have members in many countries and apply the EU GDPR standard to everyone.
01What we collect
- Account data — name and email address when you join our community or newsletter. To sign in to the members area we email you a one-time magic link and keep a short-lived login session.
- Membership data — your plan (e.g. monthly or yearly), subscription status, next billing date, and payment history, so we can show and manage your membership.
- Payment data — processed by Stripe. We never see or store your full card number. Stripe shares with us the last 4 digits, card brand, billing country, and a charge reference.
- Community activity — messages, questions, and content you post in the community, including reactions and attendance in live sessions.
- Usage & analytics data — how you interact with our website and emails, collected via analytics tools (see Cookies).
- Technical data — basic server logs (IP address, timestamp, user agent) kept for up to 30 days for security and debugging.
We don't collect special-category data (health, political opinions, sexuality, etc.). Please don't share those in community channels unless you're deliberately choosing to do so.
02Why we use it & legal basis
- Providing the service — delivering your membership, invoices, access to content and events. Legal basis: contract.
- Communications — sending you operational emails (receipts, event reminders, account notices). Legal basis: contract.
- Marketing emails — newsletter, new programming. Legal basis: consent (opt-in) or legitimate interest for existing members. You can unsubscribe from each message.
- Security & fraud prevention — server logs, anti-abuse checks. Legal basis: legitimate interest.
- Legal compliance — tax records, accounting. Legal basis: legal obligation.
03Who we share with
We use a small number of processors to run Her Frontier. Each is contractually bound to handle your data on our instructions:
- Stripe — payment processing and subscription management. Privacy policy.
- Neon — database hosting (EU region) for your account, membership and login-session data. Privacy policy.
- Hetzner — server hosting in Germany (EU) that runs our application. Privacy policy.
- Google — website analytics (Google Analytics) and delivery of our transactional emails. Privacy policy.
- Meta — the Meta Pixel, used to measure our ads and website. Privacy policy.
- MailerLite — sending our newsletter and marketing emails. Privacy policy.
- Telegram — hosting our private community group chat. Privacy policy.
We don't sell personal data. We don't share it for other companies' marketing.
04Data transfers
Some of our processors (including Stripe) are based in the United States or process data outside the EU/EEA. These transfers rely on EU Standard Contractual Clauses or equivalent safeguards as provided by each processor. Where data is hosted in the United Kingdom, the transfer is covered by the European Commission's adequacy decision for the UK. For in-person events outside the EU/EEA, the venue receives only the booking details needed for that event, which is necessary to deliver what you bought (GDPR Article 49(1)(b)).
05How long we keep it
- Account data — while you're a member, plus up to 24 months after cancellation for re-activation convenience.
- Payment records — 7 years for tax/accounting compliance (required by Portuguese law).
- Community content — remains in the community archive unless you request removal.
- Server logs — up to 30 days.
06Your rights
Under GDPR and similar laws, you have the right to:
- Access a copy of the data we hold about you.
- Correct data that's wrong.
- Delete your data (subject to legal retention requirements like tax records).
- Port your data to another service.
- Object to processing based on legitimate interest.
- Withdraw consent at any time for consent-based processing.
- Lodge a complaint with a data protection authority — in Portugal, CNPD; elsewhere in the EU/EEA, the authority of the country where you live; in the UK, the ICO.
- If you live outside the EU/EEA and UK — for example in the United States or Switzerland — local law may give you additional rights. Ask us and we'll honour them on the same 30-day timeline.
To exercise any of these, email olly@herfrontier.ai. We'll respond within 30 days.
07Cookies & analytics
We use a small number of cookies and similar technologies:
- Essential — a first-party session cookie that keeps you signed in to the members area. The site doesn't work without it.
- Analytics — Google Analytics to understand how the site is used.
- Advertising — the Meta Pixel to measure our ads and reach people who might be interested in Her Frontier.
Stripe-hosted checkout pages also use their own cookies governed by Stripe's privacy policy. You can control or block cookies in your browser settings; blocking analytics and advertising cookies won't affect your membership.
08Children
Her Frontier is not directed at children. We don't knowingly collect data from anyone under 18. If you believe we have, please contact us and we'll delete it.
09Changes
We'll post updates to this policy here with a new "Last updated" date and notify members by email of any material changes.