Privacy Policy

1. What we collect

When you purchase a product, we collect your email address. This is the only personal information we collect. We do not collect your name, phone number, or any other identifying information.

We also collect standard server logs including IP addresses and browser information for security purposes. These are not linked to your identity.

2. How we use your information

Your email address is used solely to deliver your download link after purchase. We do not send marketing emails, newsletters, or promotional content unless you explicitly opt in.

We will never sell, rent, or share your email address with any third party for marketing purposes.

3. Third-party services

We use the following third-party services to operate our store:

• Paddle — payment processing. Your payment information is handled entirely by Paddle and is never stored on our servers.
• Resend — transactional email delivery of your download link.
• Supabase — secure database storage of your order information.
• Cloudflare R2 — secure file storage for digital products.

4. Data security

All data is transmitted over HTTPS. Download tokens are cryptographically hashed before storage — even in the unlikely event of a data breach, your download links cannot be reconstructed from our database.

Payment data is never stored on our servers. All payments are processed by Paddle, a PCI-compliant payment provider.

5. Data retention

We retain your order information (email address and purchase record) for accounting and legal compliance purposes. Download tokens expire automatically after 30 days.

6. Your rights

You may request deletion of your personal data at any time by contacting us. We will remove your information from our systems within 30 days, except where retention is required by law.

7. Contact

For any privacy-related questions, contact us at orders@designffective.com.