Document type: Privacy notice — billing section (draft)
Version: 0.2 draft
Controller: Converging Realities Ltd (Academbee)
Last updated: June 2026
Cross-read Privacy policy. Legal review required.
Converging Realities Ltd
Panagias Kikkou 38, 2331, Lakatamia, Nicosia, Cyprus
VAT: CY-10447220L
Privacy contact: Savvas Iedidis — support@academbee.com
Supervisory authority (Cyprus): Commissioner for Personal Data Protection
Identity, subscription status, Stripe ids, payment amounts, invoice numbers, last 4 card digits (from Stripe), email content logs, legal acceptance records, grace/dunning state.
We do not process full card numbers on our systems.
| Purpose | Basis |
|---|---|
| Subscriptions and renewals | Contract 6(1)(b) |
| Payment method update via Stripe | Contract 6(1)(b) |
| Transactional email (activation, renewal 30d/14d, failed payment, cancel, upgrade/downgrade) | Contract 6(1)(b) |
| In-app billing banners | Contract 6(1)(b) |
| Invoices and tax | Legal obligation 6(1)(c) |
| Fraud / chargeback evidence | Legitimate interests 6(1)(f) |
| Terms acceptance audit | Legal obligation / Contract |
Stripe, SendGrid, Supabase, Vercel — DPAs required. Sub-processors per main Privacy policy.
| Data | Retention (indicative) |
|---|---|
| Invoices / payments | 7 years (tax) |
| Subscription history | Account lifetime + limitation period |
| Legal acceptances | 6 years after end of relationship |
| Webhook idempotency logs | 24 months |
SCCs and supplementary measures where data leaves EEA/UK — counsel to confirm.
Access, rectification, erasure (subject to invoice retention), restriction, portability, objection, complaint to supervisory authority. Contact support@academbee.com — one month response.
Grace lock and delisting follow defined billing rules — no solely automated legal-effect decisions without human review for appeals (support contact).
Draft 0.2 — legal sign-off required before publication.