Legal

Privacy policy

We collect the minimum needed to sell you a file and get it to you. No advertising trackers, no data sales, no profile building.

1. 01

   Current state of this store

   Being accurate matters more than sounding complete. At the time of writing, this store has no payment processor, account database or email service connected. That means:

   • No purchase can be made, so no billing data exists.
   • No account can be created, so no profile data exists.
   • The free-starter and contact forms validate in your browser and are held in your own browser storage only. Nothing is transmitted to us or to a third party.
   • Your cart is stored in your browser's local storage and never leaves your device.

   The sections below describe what will apply once checkout, accounts and email delivery are switched on, and this page will be dated again at that point.

2. 02

   What we collect

   • Email address — when you request the Free Production Starter, contact us, or buy a system. It identifies your download library.
   • Name and billing country — at checkout, for receipts and sales-tax obligations.
   • Order records — what you bought, when, at what price, and a payment-provider reference. We never see or store your card number; card entry happens entirely inside the payment provider's hosted checkout.
   • Download events — which product version was issued to your account and when, so we can support you and detect abuse of a license.
   • Message content — whatever you write in a contact form.

   We do not collect location data, contacts, biometric data or special-category data.

3. 03

   What we do not do

   • We do not sell, rent or trade your personal data.
   • We do not run advertising pixels or cross-site behavioural trackers.
   • We do not add you to a mailing list because you bought something — that requires opting in.
   • We do not read or scan the files you produce; they are never uploaded to us.
4. 04

   Why we are allowed to hold it

   • Contract — order, entitlement and download records exist so we can deliver what you paid for.
   • Consent — marketing email is sent only when you tick the box, and you can withdraw at any time from the link in every email.
   • Legal obligation — sales and tax records must be retained for the statutory period.
   • Legitimate interests — basic security logging and preventing license abuse.
5. 05

   Cookies and storage

   We do not use advertising or analytics cookies. The site uses your browser's local storage for two functional purposes: keeping your cart between visits, and remembering a starter request made while email delivery is offline.

   When accounts go live, a session cookie will be set after sign-in. That cookie is strictly necessary to keep you signed in.

6. 06

   Processors we intend to use

   When the store is live, a small number of vendors will process data on our instructions: a payment provider (hosted checkout, billing and tax records), a database and private file-storage provider (accounts, orders, entitlements, product files) and an email provider (receipts, download links and opted-in updates).

   Each is bound by a data-processing agreement and may only use the data to provide their service to us. This list will be named specifically here once those services are connected.

7. 07

   How long we keep it

   • Order and tax records: as long as the law requires, typically six to seven years.
   • Account, entitlement and download records: while your account is open, then deleted.
   • Marketing subscribers: until you unsubscribe, then removed from the sending list.
   • Contact messages: up to 24 months, so we can pick up a thread you return to.
8. 08

   Your rights

   Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to processing, or send it to another provider. You can also withdraw marketing consent at any time.

   Email support@oddframesupply.com and we will respond within 30 days. If you are unhappy with the outcome, you can complain to your local data-protection authority.

9. 09

   Security

   Paid files are never published to a public URL. They live in private storage and are reachable only through short-lived signed links issued after an entitlement check tied to your account. Database rows are protected by row-level security so that a record is only readable by the account that owns it.

10. 10

    Children

    This store is intended for people aged 16 and over. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

11. 11

    Changes to this policy

    If we change what we collect or who processes it, we will update this page and the date at the top. Material changes affecting existing customers will be sent by email where we hold an address for that purpose.