Plain English. Not legal advice.
1. Information We Collect
Purchase information processed by Paddle: name, billing address, email, transaction details. We receive purchase confirmation from Paddle but do not directly process payment card details.
Direct contact emails sent to [email protected]: name, email, message content.
Server logs from Cloudflare Pages: IP address, browser user-agent, requested URL, timestamp. Standard access logs retained per Cloudflare's policy.
2. Why We Collect
Contract performance: to deliver purchased products and provide support.
Legal obligation: tax records, fraud prevention, accounting compliance.
Legitimate interests: security, abuse prevention, service improvement.
Consent: where applicable for any optional contact or communications.
Note: SignalSculpt sample packs are direct downloads. We do not collect email addresses for sample pack delivery.
3. Service Providers (Processors)
Paddle (paddle.com): payment processing and merchant of record.
Cloudflare (cloudflare.com): hosting and DNS via Cloudflare Pages.
4. User Rights
Depending on your location, you may have rights including: access, correction, deletion, portability, objection, restriction of processing, withdrawal of consent. To exercise these rights, contact [email protected].
UK and EU users have the right to complain to a supervisory authority such as the UK Information Commissioner's Office (ico.org.uk) or your national data protection authority.
California users have rights under CCPA including the right to know, delete, and opt out of sale of personal information. We do not sell personal information.
5. Retention
Purchase records are retained as required for tax and accounting compliance, typically up to 7 years.
Support emails are retained for up to 24 months for service quality and business records.
Server access logs are retained per Cloudflare's policy.
6. Do Not Track and Third-Party Advertising
We do not currently respond to browser Do Not Track signals. We do not permit third-party advertising networks to collect personal information on this site for cross-site targeted advertising.
7. International Transfers
Data may be processed in jurisdictions other than your country of residence, including the United States and United Kingdom, in accordance with applicable cross-border data transfer mechanisms.
8. Children's Privacy
SignalSculpt products are intended for professional buyers. We do not knowingly collect information from individuals under 18 years of age.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision.
10. Contact
For questions about this Privacy Policy or to exercise privacy rights, contact [email protected].