Privacy Policy

This Privacy Policy explains how personal data is collected, used, stored, and disclosed when you use xyvoss.com and related services.

1. Data controller

Controller: xyvoss
Contact: xyvmadeit@gmail.com

2. Categories of data

• Order and account data: checkout email, order items, transaction amount, currency, and payment/session identifiers.
• Payment data: payment card and billing details are processed by Stripe. xyvoss does not store full card numbers.
• Technical data: IP address, browser/device information, and service logs.
• Support communications: messages sent by email or social channels.
• Local data: browser local storage/cookies required for core functionality (for example cart state).

3. Purposes of processing

• Process payments and fulfill digital delivery.
• Provide customer support and replacement downloads.
• Prevent fraud, abuse, and unauthorized access.
• Maintain accounting, tax, and legal compliance records.
• Operate and improve service performance and reliability.

4. Legal bases (EEA/UK where applicable)

• Performance of a contract (order fulfillment).
• Legitimate interests (security, fraud prevention, operations).
• Compliance with legal obligations (tax/accounting).
• Consent, where legally required.

5. Processors and service providers

Data may be processed by service providers used to operate the service, including Stripe (payments), Vercel (hosting), Supabase (storage/data), and Resend (transactional email), each under their own terms.

6. Data sharing

Personal data is shared only when necessary to deliver the service, comply with law, or protect legal rights. xyvoss does not sell personal data.

7. Data retention

Order and transaction records are retained for as long as required for contractual performance, support, tax/accounting obligations, and legal defense, and then deleted or anonymized where feasible.

8. International transfers

Data may be processed outside your country. Where required, appropriate safeguards are applied by relevant providers.

9. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing, and to lodge a complaint with a supervisory authority. Requests can be sent to xyvmadeit@gmail.com.

10. Security

Reasonable technical and organizational measures are used to protect personal data. No method of transmission or storage can be guaranteed to be fully secure.

11. Children

The service is not directed to children under 16, and personal data is not knowingly collected from children.

12. Updates

This Privacy Policy may be updated from time to time. The updated version is effective from the date published on this page.