Privacy Policy

Draft — review with counsel before launch. Last updated: 2026-07-18.

Information We Collect

We collect account information (email, display name, password hash), transaction data (orders, purchase codes, license activations), seller information for verified sellers (tax profile, payout details, KYC status), and standard technical data (IP address, device and browser metadata, usage logs).

How We Use Your Information

We use your data to operate the marketplace: process orders, issue and enforce licenses, deliver signed downloads, prevent fraud, run payouts to sellers, respond to support requests, and meet our own tax and regulatory obligations.

Legal Bases for Processing

Where GDPR applies, we process your data under one or more of: performance of a contract (fulfilling your order), legitimate interest (fraud prevention, platform security), legal obligation (tax and KYC recordkeeping), and consent (marketing communications, which you may withdraw at any time).

Your Data Rights

If you are located in the EEA, UK, or another jurisdiction with equivalent data-protection law, you have the right to access, correct, export, or request deletion of your personal data, and to object to or restrict certain processing. Deletion requests are honored subject to records we are legally required to retain, such as completed-order and tax records.

Data Retention

We retain account and order records for as long as your account is active, and for a further period required by tax, accounting, and fraud-prevention obligations. Data tied to a closed account is deleted or anonymized once those retention periods expire.

Cookies and Tracking

We use strictly necessary cookies to keep you signed in and remember cart state. Any analytics or marketing cookies are disclosed and, where required, consented to separately.

Third-Party Processors

Payments are processed by Stripe, Razorpay, and PayPal, each of which handles your payment details under its own privacy policy — we never store full card numbers. Hosting, storage, and delivery of digital products run through our cloud infrastructure providers, bound by data-processing agreements.

International Transfers

Your data may be processed in countries outside your own. Where required, we rely on standard contractual clauses or an equivalent safeguard for cross-border transfers.

Data Protection Contact

For data-rights requests or privacy questions, contact privacy@dreams.example (placeholder — replace with a real, registered Data Protection contact before launch).

Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be posted here with a new "Last updated" date.