We collect information that you provide directly to us when making a purchase:

• Email address (required for order confirmations and download links)
• Name (if provided during checkout)
• Payment information (processed by Stripe, Inc. and never stored on our servers)
• Download activity (token usage and timestamps for product delivery)

All payment transactions are processed by Stripe, Inc., a certified PCI-DSS Level 1 Service Provider. When you make a purchase, your payment card details are transmitted directly to Stripe and are never stored on our servers.

The following information is shared with Stripe for payment processing:

• Your name and email address
• Billing address
• Order details and transaction amount

Stripe may collect additional device and behavioral data for fraud prevention purposes. For more information about how Stripe handles your data, please review their privacy policy at https://stripe.com/privacy.

We use the information we collect to:

• Process and fulfill your orders
• Send download links and purchase receipts via email
• Respond to your support requests and inquiries
• Improve our products and services
• Detect and prevent fraudulent transactions

We retain your personal data as follows:

• Purchase records are retained for 7 years for tax and accounting purposes
• Download tokens expire after 24 hours and are automatically deleted
• Personal data deletion is available upon request by contacting support@all-the-machines.com

Our website does not use analytics cookies or tracking scripts. However, Stripe may set cookies during the checkout process for fraud prevention and payment processing purposes. These cookies are controlled by Stripe and subject to their privacy policy.

If you are a resident of the European Economic Area (EEA), you have the following data protection rights under the General Data Protection Regulation (GDPR):

• Right to access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to data portability: Request a copy of your data in a machine-readable format
• Right to object: Object to processing of your personal data

To exercise any of these rights, please contact us at support@all-the-machines.com with your request. We will respond within 30 days.

EU residents also have the right to lodge a complaint with your local supervisory authority if you believe your data protection rights have been violated.

We share your information with the following third-party service providers:

• Stripe, Inc. — Payment processing
• Hosting provider — Website and database hosting

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

Our products and services are not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately at support@all-the-machines.com.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. Your continued use of our website and services after any changes constitutes acceptance of the updated policy.

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

support@all-the-machines.com