Privacy policy

1. Data we collect

We only collect what we need to deliver an order and support you afterwards.

• Order data: name, email address, billing country, items purchased, order total.
• Payment metadata: transaction identifiers from Paddle or our crypto processor. We never receive or store full card numbers or wallet private keys.
• Support data: the contents of messages you send us and the email address you use.
• Marketing data: your email address if you subscribe to the studio letter.
• Technical data: anonymous, aggregated page-view counts and error logs. No cross-site tracking.

2. How we use it

To deliver your download and receipt, to answer support requests, to meet tax and accounting obligations, to prevent fraud, and — only if you opted in — to send the studio letter.

We do not sell personal data and we do not share it with advertising networks.

3. Payments

Paddle acts as merchant of record for card and wallet payments, which means Paddle is the controller of the payment data it collects. Their privacy policy applies to that processing.

Crypto payments are processed by a third-party processor. The processor sees the wallet address, amount, and order reference needed to confirm the transaction; the transaction itself is public on the relevant blockchain.

4. Cookies

We use a single local-storage entry to remember your cart between visits. We do not set advertising cookies. If we add product analytics later, this policy will be updated first.

5. Retention

Order records are kept for seven years to satisfy tax and accounting requirements. Support emails are kept for two years. Marketing subscriptions are kept until you unsubscribe.

6. Your rights

You can request access to, correction of, or deletion of your personal data, and you can object to processing based on legitimate interest. Email us and we will respond within 30 days.

Data controller: Aurelia Studio, LLC, 2211 Ocean Park Ave, Suite 4, Santa Monica, CA 90405. Contact: hello@aurelia.studio.

7. Security

All traffic is encrypted with TLS. Access to order records is limited to the two people who run the studio, protected by two-factor authentication.

8. Children

Our products are not directed at children under 16 and we do not knowingly collect their data.