Privacy policy

What data I collect

At registration: email address and password, stored encrypted. At purchase: email address, the items you bought, the amount paid, and the time of purchase. At download: which track you downloaded and when, tied to your account. I never see or store your card details. Stripe handles those entirely. For invoicing I also record your billing address (the country and, if you give them, your name and address), the country that issued your card (not the card details), and the fact and time you accepted the declaration about the right of withdrawal.

Why I process this data

The legal basis for data related to purchases and downloads is the performance of a contract, so you receive what you bought and can re-download it any time while logged in. There is currently no marketing-related processing. Invoicing and keeping accounting records are legal obligations for me. Recording your country and your withdrawal declaration serves to meet legal requirements and to prove the facts in case of a dispute. I also use your card's issuing country and the country of your billing address to check, at payment, whether the purchase falls within the allowed area (Hungary and the EU member states) — only for this check, not for any other purpose.

Who has access to your data

Payments are processed by Stripe, Inc.; hosting and the database are provided by Cloudflare, Inc.; and emails (registration confirmation, password reset) are delivered by Resend. None of them use your data for their own purposes. They only access it to the extent needed to provide the service. I issue invoices in the Billingo invoicing system, which receives the data needed for the invoice (name and address if you give them, email address, purchase details).

How long I keep your data

Purchase data is kept for as long as required by accounting and tax retention rules, typically 8 years. Your account and its data are kept until you delete the account, or, for guest purchases, until you request deletion. I keep issued invoices and the record of your withdrawal declaration for the same period.

Your rights

You can request access to, correction of, or deletion of your data, ask for it in a portable format, or object to its processing at any time. Write to the email address below to do so.

International data transfer

Stripe and Cloudflare also process data in the United States, under appropriate safeguards based on the EU Standard Contractual Clauses.

Contact

For privacy-related questions, reach me at the email address below.

customer-service@dev-pain.store