Privacy Policy

Last updated: June 2025 | Effective immediately upon account registration.

DigiStore Pro ("we", "our", "the platform") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

Account data: username, email address, full name (optional), and hashed password.
Order data: purchased products, transaction amounts, crypto payment references.
Technical data: IP address (for security and rate limiting), browser session data, login timestamps.
Support data: messages you send us via the support form.

We do not collect credit/debit card numbers, government IDs, or financial data — payments are handled directly by Cryptomus.

2. How We Use Your Data

To create and manage your account.
To process orders and deliver purchased products.
To communicate order status updates and respond to support tickets.
To detect and prevent fraud, abuse, and unauthorized access.
To comply with applicable laws and regulations.

3. Data Sharing

We do not sell, rent, or share your personal data with third parties, except:

Cryptomus: Your order reference and amount are shared with our payment processor to create invoices. Cryptomus has its own Privacy Policy.
Legal requirements: If required by law or court order.

4. Data Retention

We retain your account data for as long as your account is active, plus 2 years after deletion for legal compliance. Order records are retained for 7 years for financial record-keeping. System logs are automatically purged after 90 days.

5. Security

Your password is hashed using Argon2id (the highest-security algorithm available). Data is transmitted over HTTPS. We implement rate limiting, CSRF protection, and access controls to safeguard your account.

6. Cookies

We use a single, secure HttpOnly, SameSite=Strict session cookie to keep you logged in. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

7. Your Rights

Access: Request a copy of your personal data.
Correction: Update your profile information via Account Settings.
Deletion: Request account deletion via the Account Info tab or by contacting support.
Portability: Request a machine-readable export of your data.

To exercise these rights, contact our support team.

8. Children's Privacy

Our services are not directed at children under 13. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this policy periodically. We will notify registered users of material changes via email or an in-dashboard notice. The "Last updated" date above indicates when changes were last made.

10. Contact

If you have privacy concerns, contact us at privacy@digistore.pro or through our Support Center.