Legal

Privacy Policy

Last Updated: 2026-07-30

Draft

Pre-publication review required

Sections marked Owner to finalize require review and approval by qualified legal counsel before the founder publishes this page. The structure is stable; the underlying legal language is not.

1. Information We Collect
Owner to finalize

Cipherloom collects the following categories of personal information:

  • Account information. Name and email address collected at purchase via Stripe, used to deliver curriculum access and lifecycle email.
  • Payment information. Card and billing details are handled directly by Stripe; Cipherloom does not store full card numbers. See the Terms & Conditions for the data-collected disclosure section.
  • Contact-form submissions. Submitted through the Contact page; stored for support history.

2. How We Use It
Owner to finalize

  • To deliver Cipherloom curriculum access and account maintenance.
  • To process payments (via Stripe, our payments processor).
  • To respond to support messages and contact-form submissions.
  • To send transactional emails (purchase confirmation, onboarding, support replies).

3. Storage & Protection
Owner to finalize

PCI-scoped payment data is handled by Stripe and never reaches Cipherloom's servers. Cipherloom stores only the minimum needed account fields (name, email, purchase record) in the application database, protected by industry-standard hosting-provider controls.

Cipherloom does not store full card numbers, CVV codes, or full bank-account numbers.

4. Third-Party Processors
Owner to finalize

  • Stripe.Payment processing, identity, and fraud signals. Stripe's privacy practices apply to data they receive.
  • Hosting provider. Stores and serves the application and its database.
  • Transactional email service. Delivers purchase confirmations, onboarding, and direct support replies.
  • Analytics. Not currently enabled; if added later, this section will be updated before any analytics tool begins collecting data.

5. Retention
Owner to finalize

Account data (name, email, purchase record) is retained while the account remains active. Contact-form messages are retained for the duration reasonably needed for support history, then deleted or anonymized. Buyers may request earlier deletion under Section 6.

6. Your Rights
Owner to finalize

Buyers and visitors may request access to, correction of, deletion of, or portability of their personal information held by Cipherloom. Submit requests through the contact methods in Section 8; Cipherloom responds within a reasonable timeframe as required by applicable law.

7. Children's Privacy

Cipherloom is not directed at children under the age of 13 (or 16 where applicable local law requires). Cipherloom does not knowingly collect personal information from children. Parents or guardians who believe a child has submitted information may contact us for deletion.

8. Changes to Policy & Contact

Cipherloom may update this Privacy Policy from time to time. When updated, the revised policy will be posted at this URL with an updated “Last Updated” date.

Privacy questions or rights requests: cipherloom-2@polsia.app.