1. Who is responsible
[LEGAL ENTITY NAME], [BUSINESS ADDRESS], [COUNTRY], runs Zenmock and is responsible for your personal data. You can reach us through the contact form.
2. What we collect
- Account data: your name, email address and a securely hashed password (or your Google sign-in).
- Orders: what you bought, prices, invoice numbers and dates.
- Payment information: payments are handled by our payment provider. We never receive or store your full card number or security code — only a short description such as "Visa ending in 4242" for your receipts.
- Downloads: which files you downloaded and when, plus a scrambled (hashed) version of your IP address to protect accounts from misuse.
- Messages: what you send us through the contact form.
- Newsletter: your email, only if you signed up.
3. Why we use it
To run your account, deliver your downloads, process orders and refunds, send receipts and important account emails, prevent fraud and abuse, answer your questions, and — only if you agreed — send our newsletter.
4. Cookies
We use essential cookies to keep you signed in, remember your cart and protect forms against bots (Cloudflare Turnstile). We do not use advertising cookies. If we add analytics later, we will update this page.
5. Emails and unsubscribing
We send emails that belong to your account (receipts, password resets, security notices, product updates for things you bought). You can switch off product update emails in Account → Profile. Newsletter emails always contain an unsubscribe option.
6. Who we share data with
Only with services that help us run the store — our payment provider, email delivery, hosting, database and file storage providers — and only as much as they need. We do not sell your data.
7. How long we keep it
Account data stays while your account exists. Order and invoice records are kept for as long as tax law requires. Download logs and contact messages are deleted when they are no longer needed.
8. Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete your account and data (except what we must keep by law). Contact us and we will reply within 30 days.
9. Changes
We may update this policy. The date at the top shows the latest version.