Privacy Policy

1. Information we collect

Account information: your email address and chosen username.

Marketplace activity: listings you create, files you upload (stored privately), and records of purchases and download grants.

Payment records: order details such as the item, amount, and Stripe transaction identifiers. Card numbers and bank details go directly to Stripe and never touch digihaus servers.

Technical data: basic logs and usage information generated when you use the site.

2. How we use it

To operate the marketplace: create your account, show your listings, confirm payments with Stripe, deliver purchased files, and maintain your library.

To keep digihaus safe: prevent fraud and abuse, enforce our policies, and comply with legal obligations.

To communicate with you about your account and transactions.

3. How payments work

Payments are processed by Stripe and settle directly to the seller's own Stripe account. We do not collect or store payment-card details or bank information; we confirm with Stripe that a payment occurred. Stripe's handling of your data is described in Stripe's own privacy policy.

4. Service providers we share with

We use trusted providers to run the service: Supabase (database, authentication, and file storage), Vercel (hosting), and Resend (transactional email). They process data only to provide their services to us. We do not sell your personal information.

5. Cookies and analytics

We use essential cookies to keep you signed in and keep the site secure; these are required for the marketplace to work. Optional product analytics run only if you choose "Accept" in the cookie banner, and you can decline them with "Essential only." Anonymous, cookieless traffic measurement (page counts, no personal profiles) is always on.

6. Data retention and deletion

We keep your information for as long as your account is active or as needed to provide the service and meet legal obligations. You can delete your account yourself from your account page: your profile and listings are removed, and records we are required to keep (such as sales history tied to other users' purchases) are anonymized.

7. Your rights in the EEA and UK

If you are in the European Economic Area or the United Kingdom, we process your data to perform our contract with you (running your account and transactions), for our legitimate interests (keeping the marketplace safe), and with your consent (optional analytics). You have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, to withdraw consent at any time, and to complain to your local data protection authority.

8. California privacy rights

If you are a California resident, you have the right to know what personal information we collect (the categories listed above: identifiers, commercial information, and internet activity), to access or delete it, and to not be discriminated against for exercising those rights. We do not sell or share your personal information as those terms are defined in the CCPA/CPRA, and we do not use sensitive personal information beyond what is needed to provide the service.

9. Security

We use access controls, row-level security, and short-lived signed URLs for file delivery to protect your data. No system is perfectly secure, and you are responsible for safeguarding your credentials.

10. Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal information. To make a request, contact hello@digihaus.xyz.

11. Children

digihaus is not directed to anyone under 18, and we do not knowingly collect information from children.

12. Changes & contact

We may update this policy; we will revise the “last updated” date above. Questions or requests: hello@digihaus.xyz.