Privacy Policy

This policy explains what WebBuddyMarketplace stores in order to sell licences and run accounts. It is not a promise that we collect as little as a brochure site. A marketplace that issues licences, signed downloads, and refund clawbacks has to keep the records that make those things possible.

What we collect

• Account data: name, email, password hash, optional two-factor secrets, roles.
• Orders: items, amounts, tax, gateway references, invoice numbers, the email used at checkout.
• Licences, download tokens, and the verification log that proves a licence was checked.
• Messages, tickets, reviews, and the fact of a report or take-down.
• Security and audit logs for admin and finance actions.
• Technical data: IP address, user agent, and the cookies that keep you signed in and keep a cart.

Card numbers do not sit on our servers. The payment gateway you choose at checkout collects them. We store the gateway's reference so we can fulfil, refund, and contest a dispute.

Why we collect it

To create your account, take payment, issue a licence, let you download, tax the order, pay authors, handle a refund or chargeback, stop abuse, and meet bookkeeping and legal duties. We also use your email for transactional mail. Newsletter mail is separate: double opt-in, one-click unsubscribe.

We do not sell your email list. We may share what a processor needs to do its job — payment, email, storage, and (if we use one) a search or job queue. Those processors are not free to use your data for their own marketing.

How long

Orders, invoices, licences, ledger entries, and audit logs are kept for as long as we need them to run the marketplace and to answer a tax, chargeback, or legal request. That is longer than a newsletter subscription. Closing an account does not erase an invoice.

Download tokens and some rate-limit rows are swept on a schedule. Unread notifications and unprocessed webhook events are not deleted by those sweeps.

Your choices

You can update profile fields we expose in the account screens. You can unsubscribe from marketing mail. You can ask for an export of the personal data we hold on you, or ask us to delete what the law lets us delete. We will not delete records we have to keep — including paid orders and the licence history that proves what you bought.

Cookies

We use cookies and similar storage for the session, the cart, checkout, and (if you choose) theme. The site will not work as a shop without the ones that keep you signed in and remember the cart.

Security

We hash passwords, encrypt configured secrets at rest, sign download links so they expire, and sanitise stored HTML before it is shown. No transmission over the public internet is perfectly safe. You are responsible for the strength of your password and for keeping two-factor enabled if we offer it.

Children

The marketplace is for adults. Do not create an account or buy if you are under 18 (or under 21 where that is the age of majority we must follow).

Changes

We may change this policy. The current version is the one on this page. Questions about privacy go to the operator of WebBuddyMarketplace through the contact details published on the site.