Legal

Privacy Policy

Last updated: 19 October 2026

Each Plus licence is a one-time purchase for one person. Individuals and organisations can buy several licences in one checkout, with a separate key for each person. Your licence key can be used on two computers at the same time. To switch computers, register an account at agavien.com using the same email address you used for your purchase, then deactivate an old computer in your account to free up a slot. Local course creation works offline. Plus needs internet for activation. After activation, Plus works offline without a time limit.

Accounts and community files are stored with Supabase in the EU. Cloudflare serves the website and installer downloads and processes requests globally. Scaleway delivers emails. Stripe processes payments. Licence checks process your licence reference, installation ID, computer name and last check time; course content is not sent for licence checks. Optional hosted sharing uploads your exported HTML course to private Cloudflare R2 storage. Anyone with its link can open it. We process account and installation identifiers, course title, size and usage counters to provide sharing and enforce allowances. Deleting a hosted course disables its link immediately; physical cleanup follows. Keep a local backup.

This policy explains how Agavien AB processes personal data when you use the website, Agavien Studio desktop app, Plus checkout or community library. Agavien AB is the controller for data it handles through these services.

Desktop courses and community uploads

Courses you create in the desktop app remain files on your computer unless you choose to share them. If you upload a course to the community library, we store its JSON file, optional cover image and listing details on our hosted service to review and make it available for download. Do not include personal or confidential information in a course you share. Optional hosted sharing uploads your exported HTML course to private Cloudflare R2 storage. Anyone with its link can open it. We process account and installation identifiers, course title, size and usage counters to provide sharing and enforce allowances. Deleting a hosted course disables its link immediately; physical cleanup follows. Keep a local backup.

What we process and why

Accounts: email address, authentication details and account identifier for sign-in and account security. Basis: providing the community service and protecting it.
Community contributions: course file, title, description, category, level, language, displayed author name, optional cover, uploader identifier, moderation status and review notes. We use these to host, review and display submissions. Basis: providing the community service and our legitimate interest in keeping it safe.
Activity: ratings, report reasons and associated account identifiers, plus aggregate download counts. We use these to operate the library, handle reports and prevent abuse. Basis: providing the service and our legitimate interest in moderation.
Contact form: name, email and message so we can respond. Basis: your consent given on the form.
Plus purchase and activation: email, purchase reference, license key, activation count and last activation time used to check a license. Basis: fulfilling your purchase, legal accounting obligations and preventing abuse. Our payment provider processes card details; we do not store your full card number.

Who can see community content

Approved course listings, cover images, ratings and download totals can be seen by visitors. Signed-in users can download approved course files. Pending submissions are visible to their uploader and moderators, not the public; moderators can review files and reports and leave review notes. Other users may keep copies of a course they downloaded even after the listing is removed. Avoid uploading third-party personal data without a lawful basis.

How long we keep data

Contact messages are kept for up to 24 months after the conversation ends; purchase and license records for the life of the license and any period required by tax law. Account and community records are kept while needed to provide the library, handle moderation and meet legal obligations. You can delete your own course listing through the library; to request account deletion or access to your data, contact us. Removing a listing cannot recall copies others already downloaded. We do not currently offer automatic account deletion on the website.

Service providers and transfers

We use hosting and authentication services for accounts and community files, a payment provider for checkout and, where applicable, an email delivery provider. Approved content is shared with visitors or signed-in downloaders as described above. We do not sell personal data or share it with advertising networks. Provider processing or transfers outside your country may occur under applicable safeguards; contact us for details.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or object to processing based on legitimate interests. You may withdraw consent where we rely on it, without affecting earlier processing. Use the contact page to make a request; you may also complain to your data protection authority.

Cookies and local storage

Account sign-in, checkout and your language preference use necessary browser storage. See the cookie notice for details.

Optional analytics

With your permission, we use Google Tag Manager and Google Analytics to understand visits, traffic sources and page usage. Google processes information such as pages viewed, device details and approximate location, and may store analytics cookies. Advertising consent stays disabled. Your choice is saved for six months; you can change it in Cookie settings.

Contact

Agavien AB, Raskarums byväg 10, 277 45 Sank Olof, Sweden