Data Privacy

1. Information we collect

We only collect information that is necessary to operate the website and fulfil your purchases:

• Account information — your email address, used to send the sign-in one-time password (OTP) and to associate orders and license keys with your account.
• Order information — purchaser name, email, the apps you purchased, quantities, and total amount. Guest checkouts capture name and email against the order so we can deliver the license keys.
• License activation records — when a purchased app activates a license, we record the organisation URL supplied in the request, a timestamp, and an activation counter (max 3 activations per key) to prevent abuse.
• Contact form submissions — the name, email, and message you provide on the Contact Us page, sent to our support inbox.
• Payment information — handled entirely by Stripe. We never see or store your card details; we only receive a confirmation that payment succeeded and a session identifier.

2. Cookies we use

This site uses only the cookies that are strictly necessary for it to function. We do not use advertising, analytics, or tracking cookies.

• Authentication cookies (sb-*-auth-token) — set by Supabase when you sign in, so subsequent requests can identify you. These are HTTP-only and rotate automatically.
• Cookie consent cookie (jaseth-cookie-consent) — set when you click “I Understood” on the consent banner. Lasts 5 days, then the banner reappears.
• Shopping cart storage — your cart is kept in your browser's local storage (not a cookie) and is cleared automatically after a successful checkout.

3. How we use your information

• To authenticate you and let you access your orders and license keys.
• To process payments through Stripe and fulfil your orders.
• To send transactional emails: sign-in OTPs, order confirmations with license keys, and replies to your Contact Us messages.
• To enforce per-license activation limits and prevent abuse.

We do not send marketing emails. You will only receive emails that are directly related to your account, your orders, or a request you initiated.

4. Where your data is stored

• Database — PostgreSQL, hosted on AWS infrastructure in the Australia (Sydney) region. Row-Level Security is enabled so you can only read your own orders and license keys.
• Application hosting — Vercel.
• App package downloads — Vercel Blob storage. We do not record who downloads a free app.
• Payment processing — Stripe (subject to Stripe's own privacy policy at stripe.com/privacy).

5. Sharing of your information

We do not sell or rent your personal information. We share data only with the service providers listed above, strictly to operate this website. We may disclose information if required by law.

6. Data retention

We retain order and license records for as long as your account exists, so that you can re-download license keys and we can honour activation limits. Contact-form messages are retained in our support inbox for as long as needed to address your enquiry.

7. Your rights

You may request a copy of the personal information we hold about you, ask us to correct or delete it, or close your account. Note that deleting your account will also remove access to any license keys associated with it. To exercise these rights, contact us via the Contact Us page.

8. Changes to this policy

We reserve the right to update this Data Privacy page at any time. Material changes will be reflected by a new “Last updated” date at the top of this page. Your continued use of the website after such changes constitutes your acceptance of the updated policy.

9. Contact

Questions about this policy? Reach us through the Contact Us page.