KBM Book

Privacy Policy

Your privacy is the foundation of your trust. This policy explains — plainly — what we collect, why, how we protect it, and your full rights over it.

Draft, October 20, 2026 — pending the store owner's review before publishing

1 — Data we collect

  • Account data: name, email, optional phone, and password stored as an irreversible cryptographic hash.
  • Usage data: sign-in logs, pages visited, language preference — to operate and improve the platform.
  • Transaction data: purchases, order numbers and download-link records — for contractual and accounting obligations and to protect links from abuse.

2 — Why we process it

  • Contract performance: your account, purchases, and requested services.
  • Legal obligations: invoices and financial records for statutory retention periods.
  • Legitimate interest: platform security, fraud prevention, service improvement.
  • Consent: marketing messages — separately opted-in and revocable anytime.

3 — Processors acting on our behalf

We use trusted providers under contractual safeguards: our payment provider (Stripe) — we never see your card details, our email provider (Amazon SES), and cloud hosting/storage providers.

We do not sell your data, and share it only as needed to operate the platform or under legal obligation.

4 — Your rights

  • Access and export a readable copy of your data.
  • Correct inaccurate data from your account or by request.
  • Delete your account: your identity is anonymized, while financial records remain for mandatory statutory periods.
  • Withdraw marketing consent anytime.
  • Complain to your local data protection authority.

5 — Retention

We keep data while your account exists and as needed for the stated purposes. Service uploads are deletable after completion per retention settings; financial records follow commercial-law periods (up to ten years).

6 — Security

  • Encryption in transit (TLS) and for sensitive secrets at rest (AES-256).
  • Least-privilege access controls; mandatory two-factor authentication for staff.
  • An immutable audit log of every administrative action touching data.
  • In case of an incident affecting personal data, we notify authorities and affected users per applicable requirements.

7 — Cookies

We use essential cookies for sessions and language preference. Any future analytics or marketing use will be presented with clear choices before activation.

8 — Contact

Privacy requests: [email protected].