GDPR Article 25
Privacy by design & by default
Privacy Just is built by privacy professionals for privacy professionals. We hold ourselves to the same standard we help others meet. Below is how Ann Cavoukian's seven principles show up as concrete controls in this product.
1. Proactive, not reactive — preventative, not remedial
We design for the worst case before it happens: threat-model each feature, ship with RLS on from day one, treat security warnings as blockers, and log security-relevant events.
- Row-Level Security enabled on every table holding personal data
- SECURITY DEFINER helpers used only where required, with EXECUTE revoked from public
- Automated Supabase linter run after every schema change
2. Privacy as the default setting
You get maximum privacy without lifting a finger. Marketing opt-in is off by default, cookies beyond strictly necessary are off until you consent, and profile fields beyond email are optional.
- marketing_opt_in defaults to false
- Cookie banner blocks analytics/marketing until explicit consent
- Sign-up collects only email + password; profile details are optional
3. Privacy embedded into design
Privacy is a first-class part of the architecture, not a bolt-on. Every table has RLS policies scoped to auth.uid(); user-facing data flows through authenticated server functions; secrets never reach the browser.
- Per-user RLS policies on profiles, entitlements, subscriptions, consent, audit
- requireSupabaseAuth middleware on all user-scoped server functions
- Service-role key only used inside server-only modules
4. Full functionality — positive-sum, not zero-sum
We refuse the false trade-off between privacy and features. All product features work with the minimal data set; nothing degrades if you decline optional consent.
- All tools work without marketing consent
- Google sign-in and email/password both fully supported
- Optional profile fields never gate functionality
5. End-to-end security — full lifecycle protection
Data is protected from collection to erasure. Transport is HTTPS-only, authentication requires verified email, passwords are checked against known-breach corpora, and deletion is complete.
- HTTPS everywhere; secure cookies where sessions are set
- Email verification required before sign-in
- HIBP leaked-password check on signup and password change
- Article 17 erasure implemented as a one-click account deletion
6. Visibility and transparency
You can see what we hold and why. A public privacy notice, this page, and an in-app data export make our processing legible.
- Public privacy notice at /legal/privacy
- Article 15 access via 'Download my data' in your account
- Immutable audit log of security-relevant events
7. Respect for user privacy — user-centric
You stay in control. Consent is granular, revocable, and logged; account deletion is self-service and irreversible; support responds to rights requests within statutory deadlines.
- Granular cookie categories: necessary / analytics / marketing
- Every consent decision written to consent_records with timestamp
- Self-service delete + data export from /account
- DSAR contact: privacy@privacyjust.com
Your rights, in one place
Under the GDPR you have the right to access, rectify, erase, restrict, port and object to processing of your personal data. In Privacy Just:
- • Access & portability — one-click "Download my data" in Account.
- • Rectification — edit your profile at any time.
- • Erasure — "Delete my account" removes all personal data; audit trail is anonymised.
- • Consent withdrawal — cookie preferences and marketing opt-in are always editable.
- • Complaints — you may lodge one with your supervisory authority.
Questions? Email privacy@privacyjust.com.