This Privacy Policy describes what personal data our Service collects, how it is used, and the rights you have over it. It applies to visitors, registered customers, and anyone who contacts our support team.
1. Data we collect
- Account data. Your email address, an optional username and display name, and any avatar you upload.
- Order data. Products purchased, price paid, order status, download activity, coupon codes redeemed, and the identifier of the Stripe payment.
- Support data. The contents of messages you send us and any attachments you share.
- Technical data. Standard server logs (IP address, user agent, timestamps) used to keep the Service secure and reliable.
We do not collect or store full payment card numbers. Card details are entered directly into Stripe's checkout and never touch our servers.
2. How we use it
- To create and manage your account and licenses.
- To process payments, deliver purchased scripts, and prevent fraud.
- To send transactional emails (receipts, order confirmations, security notices).
- To provide customer support.
- To improve the Service and diagnose technical issues.
We do not sell your personal data and we do not use it for third-party advertising.
3. Where your data lives
Account, order, and support records are stored in our managed Postgres database hosted on Supabase. Files you upload (avatars, purchased script archives) are stored in the same infrastructure with access controlled per user.
4. Third-party processors
- Stripe — processes card payments and stores billing metadata. See Stripe's privacy policy for details.
- Resend — sends transactional emails such as order receipts and password reset messages.
- Supabase — hosts our database, authentication, and file storage.
These processors receive only the data necessary to perform their function on our behalf and are bound by their own security and privacy commitments.
5. Cookies and local storage
We use strictly-necessary cookies and browser storage to keep you signed in, remember your shopping cart, and secure the checkout flow. We do not use advertising cookies.
6. Data retention
Account data is retained while your account is active. Order and receipt records are retained as long as needed to fulfil legal, tax, and accounting obligations, even after an account is closed.
7. Your rights
You may request access to, correction of, or deletion of your personal data at any time by emailing our support team. Once your identity is verified we will action the request within a reasonable period. Note that deleting an account does not remove records we are legally required to keep (for example, tax invoices tied to completed orders).
8. Security
We use industry-standard measures — TLS in transit, row-level security in the database, signed short-lived download URLs, and audited third-party processors — to protect your information. No system is perfectly secure; if you believe your account has been compromised, contact support immediately.
9. Changes
We may update this Policy from time to time. Material changes will be announced on this page and become effective when posted.
10. Contact
For any privacy question or data request, contact us using the details below.