Privacy policy

1. Data we collect

We collect only what is needed to sell and deliver a digital product: your email address, an optional company name, and the details of your order (product, amount, currency, date).

2. Why we process it

• To deliver your package and issue your private access link.
• To re-send that link when you request access recovery.
• To meet bookkeeping and tax obligations.

The legal basis is performance of a contract and, for accounting records, compliance with a legal obligation.

3. No marketing without consent

We do not send marketing email, and we do not sell or share your data with advertisers. The only emails you receive are the delivery and recovery messages you triggered.

4. Processors

We rely on a small number of processors to run the service: a payment provider for card processing, a cloud database and file storage provider, and an email delivery provider. Each processes data only on our instructions.

5. Retention

Order and invoice records are retained for as long as accounting law requires. Access tokens remain active so you keep access to what you paid for; you can ask us to revoke them at any time.

6. Your rights

Under the GDPR you may request access to, correction of, or erasure of your personal data, and object to or restrict its processing. Contact us and we will respond within one month. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).