1 — Data we collect
- Account data: name, email, optional phone, and password stored as an irreversible cryptographic hash.
- Usage data: sign-in logs, pages visited, language preference — to operate and improve the platform.
- Transaction data: purchases, invoices, and download records — for contractual and accounting obligations and to apply the Refund Policy.
- Files you send for executed services (e.g., receivables ledgers and balances) — solely to execute the requested service.
- The email you leave to receive a free resource — to send the download links and count downloads; it is never added to a marketing list without separate consent.
2 — Why we process it
- Contract performance: your account, purchases, and requested services.
- Legal obligations: invoices and financial records for statutory retention periods.
- Legitimate interest: platform security, fraud prevention, service improvement.
- Consent: marketing messages — separately opted-in and revocable anytime.
3 — Processors acting on our behalf
We use trusted providers under contractual safeguards: our payment provider (Stripe) — we never see your card details, our email provider (Amazon SES), our cloud storage provider (Cloudflare) for product files, and our hosting provider.
We do not sell your data, and share it only as needed to operate the platform or under legal obligation.
4 — Your rights
- Access and export a readable copy of your data.
- Correct inaccurate data from your account or by request.
- Delete your account: your identity is anonymized, while financial records remain for mandatory statutory periods.
- Withdraw marketing consent anytime.
- Complain to your local data protection authority.
5 — Retention
We keep data while your account exists and as needed for the stated purposes. Service uploads are deletable after completion per retention settings; financial records follow commercial-law periods (up to ten years).
6 — Security
- Encryption in transit (TLS) and for sensitive secrets at rest (AES-256).
- Least-privilege access controls; mandatory two-factor authentication for staff.
- An immutable audit log of every administrative action touching data.
- In case of an incident affecting personal data, we notify authorities and affected users per applicable requirements.
7 — Cookies
We use essential cookies for sessions and language preference. Any future analytics or marketing use will be presented with clear choices before activation.
8 — Contact
Privacy requests: privacy@digitalsalla.com.