Privacy Policy

Effective date: March 31, 2026

This Privacy Policy explains how Robin Goudeketting ("we", "us", or "our") collects, uses, and protects personal data in connection with academically.me ("the Service"). We are committed to processing your data lawfully, transparently, and in accordance with the General Data Protection Regulation (GDPR) and applicable Austrian law.

1. Data Controller

The data controller responsible for your personal data is:

Robin Goudeketting
Sagedergasse 21A/1/5, 1120 Vienna, Austria
r.goudeketting@gmail.com

2. Data We Collect

Account Information

When you create an account we collect your email address. Authentication is handled via passwordless magic links — we do not store passwords.

Profile Data

Information you voluntarily add to your profile: name, biographical summary, academic affiliations, publications, work experience, educational background, and research interests. This data is stored so we can display your public profile.

Usage Data

We collect standard server logs including IP addresses, browser type, referring URLs, and pages visited. This data is used solely for security, performance monitoring, and debugging. It is not used for behavioural profiling or advertising.

3. How We Use Your Data

  • To create and manage your account and profile.
  • To send transactional emails (magic link authentication, billing notifications).
  • To process subscription payments via Stripe.
  • To maintain the security and integrity of the Service.
  • To comply with legal obligations.

We do not sell your data. We do not use your data for advertising purposes.

4. Stripe — Payment Processing

Subscription payments are processed by Stripe, Inc., a PCI DSS-compliant payment processor. When you subscribe, you are redirected to Stripe's hosted checkout. We never receive or store your full card details. Stripe may process data in the United States; such transfers are covered by Stripe's Standard Contractual Clauses. Stripe's privacy policy is available at stripe.com/privacy .

5. Brevo — Email Service

Transactional emails (such as magic login links) are delivered via Brevo (formerly Sendinblue), a European email service provider. Your email address is shared with Brevo solely for the purpose of delivering messages you have requested. Brevo processes data within the EU. Brevo's privacy policy is available at brevo.com/legal/privacypolicy .

6. Cookies

We use only a single session cookie to keep you logged in while you use the Service. This cookie is strictly necessary for the Service to function and is deleted when you close your browser or log out. We do not use analytics cookies, advertising cookies, or any third-party tracking technologies.

7. Data Storage & Security

Your data is stored on servers located within the European Union. We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

8. Your GDPR Rights

Under the GDPR you have the following rights regarding your personal data:

Right of access
You may request a copy of the personal data we hold about you.
Right to rectification
You may ask us to correct inaccurate or incomplete data.
Right to erasure ("right to be forgotten")
You may request deletion of your personal data. We will comply unless we are required to retain it by law.
Right to data portability
You may request your profile data in a structured, machine-readable format.
Right to restriction of processing
You may ask us to restrict processing of your data in certain circumstances.
Right to object
You may object to processing of your data where we rely on legitimate interests as our legal basis.

To exercise any of these rights, contact us at r.goudeketting@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Austrian Data Protection Authority (dsb.gv.at).

9. Data Retention

We retain your account and profile data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it to comply with legal obligations (for example, billing records required under Austrian tax law, which are retained for 7 years).

10. Third-Party Services

Beyond Stripe and Brevo described above, we do not share your personal data with third parties except where required by law or to protect the rights and safety of users. We do not integrate social media trackers, advertising networks, or analytics platforms.

11. Children's Privacy

The Service is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a prominent notice on the Service at least 14 days before they take effect. The effective date at the top of this page will always reflect the most recent version.

13. Contact

For any privacy-related questions or requests, please contact:

Robin Goudeketting
Sagedergasse 21A/1/5, 1120 Vienna, Austria
r.goudeketting@gmail.com