Privacy Policy

1. Information We Collect

1.1 Information You Provide

When you make a purchase, we collect:

• Name and email address
• Billing address
• Payment information (processed securely by Stripe — we do not store card details)

1.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and browser type
• Pages visited and time spent on our site
• Referring website and device information

2. How We Use Your Information

We use your information to:

• Process your purchase and deliver your documents
• Send order confirmations and download links
• Respond to customer service requests
• Send product updates (if you've opted in)
• Improve our website and services
• Comply with legal obligations

3. Legal Basis for Processing (GDPR)

For customers in the European Union and United Kingdom, we process your data based on:

• Contract: Processing necessary to fulfill your purchase
• Legal Obligation: Tax and accounting requirements
• Legitimate Interest: Improving our services and preventing fraud
• Consent: Marketing communications (where applicable)

4. Data Sharing

We share your information only with:

• Stripe: Payment processing (see Stripe's privacy policy)
• Supabase: Secure database hosting for order records
• Legal Authorities: When required by law or to protect our rights

We do NOT sell, rent, or trade your personal information to third parties for marketing purposes.

5. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy, typically:

• Purchase records: 7 years (for tax and accounting purposes)
• Marketing data: Until you unsubscribe or request deletion
• Website analytics: 26 months

6. Your Rights

Under GDPR (EU/UK) and CCPA (California), you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data (subject to legal obligations)
• Portability: Receive your data in a structured format
• Object: Opt out of marketing communications
• Withdraw Consent: For processing based on consent

To exercise these rights, contact us at: support@aipolicypack.com

7. Cookies and Tracking

We use cookies and similar technologies to:

• Remember your preferences
• Analyze website traffic and usage patterns
• Improve user experience

You can control cookies through your browser settings. Note that disabling cookies may affect website functionality.

8. Security

We implement industry-standard security measures to protect your data, including:

• SSL/TLS encryption for data transmission
• Secure payment processing via Stripe (PCI DSS compliant)
• Regular security audits and updates
• Access controls and authentication

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your jurisdiction. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) for EU data transfers
• Adequacy decisions where applicable
• Vendor compliance with GDPR and other privacy regulations

10. Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy regularly.

12. Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us:

Email: support@aipolicypack.com
Company: MD Commerce
Location: France