Privacy Policy

This policy explains what {{LEGAL_ENTITY_NAME}} collects when you use the marketplace and what we do with it.

What we collect

• Account details: your email address, the display name you choose, and an optional profile picture.
• Orders and licenses: what you bought or downloaded for free, prices, tax, and refunds. Card numbers go straight to Stripe; we never see or store them.
• Downloads: each download of a file, with the time and your IP address. We use this to stop abuse and to trace leaked files.
• Activity on the site: which listings are viewed and what is searched, tied to a random session id rather than your name. If you are signed in, a search can also be tied to your account.
• Product analytics: events such as signing up or completing a purchase, sent to PostHog to help us see what works.
• Seller details: your store information and, through Stripe, the identity and bank details Stripe needs to pay you. Stripe holds those details; we see only your payout status.

No student data

The marketplace is for adults. There are no student accounts and no features meant for children. Do not upload student work or anything that identifies a student.

Who processes data for us

• Supabase stores our database, sign-in records, and uploaded files.
• Stripe handles payments, seller payouts (Stripe Connect), and sales tax (Stripe Tax).
• PostHog stores product analytics events.
• Resend sends our email.
• Vercel hosts the site and keeps request logs.

Why we use it

To run your account, deliver what you buy, pay sellers, calculate and remit tax, prevent fraud and abuse, answer support requests, and improve the marketplace.

We do not sell your information

We do not sell or share personal information for advertising, and we do not run advertising pixels.

Your rights (California and elsewhere)

Depending on where you live, including California under the CCPA, you can ask to know what we hold about you, to correct it, to delete it, and to opt out of any sale or sharing (we do neither). Counsel to confirm the full list of rights we must offer. We will not treat you differently for using these rights.

To ask, use the account deletion request in your account settings, or email {{PRIVACY_CONTACT_EMAIL}}.

How long we keep it

• Download logs: {{RETENTION_DOWNLOAD_LOGS}}.
• Order, refund, and payout records: as long as tax and dispute rules require, even after an account is deleted.
• Everything else: until you delete your account, then removed or anonymized.

Cookies

• Sign-in session: keeps you signed in.
• Cart: remembers what is in your cart before you sign in.
• Session id (tpt_sid): a random id that ties views and searches to one visit, not to your name.
• PostHog: product analytics.

Changes

When this policy changes in a meaningful way, we raise the version number at the top of the page and update the date.

Contact

Privacy questions: {{PRIVACY_CONTACT_EMAIL}}.