Privacy Policy
Last updated: October 22, 2026
1. What we collect
To fulfill an order we collect your name and email address, either from an account you create or directly at guest checkout. We also store your order history, the product copies assigned to you, and a log of when you download a file (including IP address, for abuse prevention). We never see or store your card number, expiry date, or CVV — that information goes directly to Paddle.
2. How we use it
Your email is used to send order confirmations, download links, and refund notices. Your name and email are used to identify your orders, whether or not you have an account. We do not sell your data or share it with anyone except the service providers described below.
3. Payment processing
All payments are handled by Paddle.com Market Limited, who acts as the merchant of record for every transaction. Paddle collects and processes your payment details directly under its own privacy policy; we only receive confirmation that payment succeeded, along with your name and email.
4. Email delivery
Transactional emails (order confirmations, download-ready notices, refund notices) are sent through Resend, our email delivery provider. They receive your email address and the content of the message only.
5. Cookies & local storage
We use a session cookie to keep you signed in if you choose to create an account. Your shopping cart is stored in your browser's local storage, not on our servers, and is cleared automatically once an order completes. We don't use third-party advertising or tracking cookies.
6. Guest checkout & account linking
If you check out as a guest, we create a record tied to your email with no password. If you later create an account with that same email, we email you a link to set your password — that confirms the address is yours — and your past guest orders then appear in the account. If you'd rather your guest order not be linkable this way, contact us and we'll remove the association.
7. Data retention
We keep order and download records for as long as needed to provide support, honor refund requests, and meet our own legal/accounting obligations. You can request deletion of your account and personal data at any time, subject to records we're required to retain.
8. Your rights
You can request a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it, by emailing support@getecomvault.com. We'll respond within a reasonable time.
9. Changes
We may update this policy from time to time. Material changes will be reflected by updating the date below.