Privacy Policy

ForeverDesign™

Last updated: [DATE]

Before publishing: replace every [bracketed] placeholder, and have this reviewed by a qualified attorney — especially if you sell outside the United States. This draft reflects how the storefront described in your build spec actually handles data, but it is not legal advice.

This Privacy Policy explains how [Legal business name] ("ForeverDesign," "we," "us") collects, uses, and protects information when you visit [yourdomain.com] (the "Site") and purchase our digital products.

1. Information we collect

When you buy from us, we collect:

  • Your email address, which you provide at checkout, so we can deliver your purchase and send the download link.
  • Payment information. Card payments are processed by Stripe. We do not see, receive, or store your full card number — Stripe handles payment data directly. We receive only a confirmation of payment and limited transaction details (for example, the amount, currency, and a transaction ID).
  • Download access records. When you open your download link, we record the date and time of access, and may record your IP address and browser/user-agent string. We use this to operate the time-limited download, prevent abuse, and resolve any payment disputes.
  • Basic technical/log data generated automatically when you visit the Site (such as IP address and pages requested).

We do not knowingly collect information from anyone under the age of 16.

2. How we use your information

We use the information above to:

  • process your payment and deliver your purchase;
  • send the download link and any necessary service messages about your order;
  • operate and secure the 48-hour download window and detect misuse;
  • keep records required for accounting, tax, and dispute resolution; and
  • respond to your support requests.

We do not sell your personal information, and we do not send marketing email unless you separately opt in.

3. Service providers we share data with

We share limited information only with the providers that make the Site work:

  • Stripe — payment processing. See Stripe's privacy policy at https://stripe.com/privacy.
  • [Resend / your email provider] — to deliver your download email.
  • Railway — hosting of the Site and database.

These providers process data on our behalf and are not permitted to use it for their own purposes. We may also disclose information if required by law.

4. Cookies

The Site uses only the cookies necessary for it to function and to complete checkout. [If you add analytics or marketing cookies, disclose them here and provide a consent mechanism where required.]

5. Data retention

We keep order and download-access records for as long as needed to deliver the product, meet legal and tax obligations, and resolve disputes, after which they are deleted or anonymized.

6. Your rights

Depending on where you live, you may have the right to access, correct, or delete the personal information we hold about you, and to object to or restrict certain processing. California residents have rights under the CCPA/CPRA, and residents of the EU/UK have rights under the GDPR/UK GDPR. To make a request, contact us at [support@yourdomain.com]. We will respond as required by applicable law.

7. Security

We protect your information with appropriate technical and organizational measures, including encrypted connections (HTTPS) and access controls. No method of transmission or storage is completely secure, but we work to safeguard your data.

8. International users

We operate from the United States ([State, e.g., Florida]). If you access the Site from elsewhere, your information may be processed in the United States.

9. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date above reflects the latest version, and continued use of the Site means you accept the current policy.

10. Contact

Questions or requests: [support@yourdomain.com] · [Legal business name, mailing address].