Controller and contact
SPC HUB S.r.l. (Italy) is the controller. Privacy requests: privacy@guarvian.com.
Privacy by design
- Data minimisation: we store links, titles and small previews of the content we find, never the full media; the free search needs only an email and a stage name.
- Purpose limitation: your keywords and results are used only to protect your identity and are never shared with other users or sold.
- Access control: the public API keys of our database cannot read any table; all access goes through our authenticated API with row-level security, and staff access requires two-factor authentication.
- EU hosting: the primary database and authentication run in the EU; providers outside the EU operate under Standard Contractual Clauses.
Your rights and how to exercise them
| Right | How |
|---|---|
| Access and portability | Email privacy@guarvian.com; we send you a copy of your data in a machine-readable format within one month. |
| Rectification | Edit your profile, stage names and whitelist directly in the dashboard, or email us. |
| Erasure | Email privacy@guarvian.com or open a support ticket; the account and its data are deleted within 30 days. Invoices are retained for the legally required period. |
| Objection / restriction | Email us describing the processing you object to. |
| Withdraw consent | Unsubscribe link in newsletters; cookie preferences for analytics. |
| Complaint | Garante per la protezione dei dati personali (www.garanteprivacy.it) or your local authority. |
Data breaches
We notify the competent authority within 72 hours of becoming aware of a breach that is likely to result in a risk for you, and we inform affected users directly when the risk is high.
Sub-processors
Supabase, Vercel, Railway, DigitalOcean, Stripe, SendGrid (Twilio), Firecrawl, Google. We will update this list before adding a new sub-processor that handles personal data.