Privacy Policy

Last updated: 29 September 2026

This policy explains what personal data is collected when you visit provenbackends.com or buy PostgreSQL for Everything, and how it is used.

1. Who is responsible

The data controller is Agostinho Sousa, Porto, Portugal. Contact: support@provenbackends.com.

2. Visiting the website

This website does not use cookies, analytics, advertising or tracking scripts, and it has no user accounts or forms. It is hosted by Cloudflare, which processes technical data such as your IP address and browser information to deliver the pages and protect the site from abuse. See Cloudflare's privacy policy.

3. Buying the Book

Purchases are processed by Creem (Armitage Labs OÜ), the merchant of record. Creem collects the data needed for the order, such as your name, email address, billing country and payment details, and handles it under its own privacy notice. I never see or store your full card details.

Creem shares with me the order information I need to run the business: your name, email address, country, the product you bought, the amount and the date.

4. How I use your data

• To deliver your files and resend them if needed.
• To answer your support and refund requests.
• To meet accounting and tax obligations.

The legal bases are the performance of our contract (GDPR Art. 6(1)(b)) and legal obligations (Art. 6(1)(c)). I do not sell your data, and I do not send marketing emails unless you explicitly sign up for them.

5. Emails you send me

If you email support@provenbackends.com, I keep the conversation to answer you and handle your request. Messages to this address are forwarded by Cloudflare Email Routing to a mailbox hosted by Google (Gmail).

6. How long data is kept

Order records are kept for as long as Portuguese tax and accounting law requires, currently up to 10 years. Support emails are kept for up to 2 years after the conversation ends, unless they relate to an order.

7. International transfers

Some providers (Cloudflare, Creem's payment partners and Google) may process data outside the European Economic Area. They do so under safeguards such as the European Commission's Standard Contractual Clauses.

8. Your rights

Under the GDPR you can ask to access, correct, delete or export your data, or object to or restrict its processing. Email support@provenbackends.com and I will reply within 30 days. You can also complain to the Portuguese data protection authority, the CNPD, or the authority in your country.

9. Changes

If this policy changes, the new version will be published on this page with a new date.