1. Commitment to Data Minimization
At Gravorix Studio ("we", "our", or "us"), privacy is built into our software architecture. We operate under a strict data minimization principle: we only collect and process the absolute minimum data required to deliver your digital products, secure session authentication, and prevent fraud.
2. Information We Collect
We do not collect unnecessary personal metrics, analytics trackers, or commercial user profiling data. The data we handle is limited to:
- Transaction & Licensing Information: Handled securely by our merchant of record and payment processor (Stripe). We do not store or process your credit card, debit card, or banking details. When a transaction completes, we receive your purchase email and receipt ID to issue your license key.
- Session Authentication Cookies: When you log into secure application portals (such as the Stillpoint Dashboard), we issue an encrypted,
HttpOnly session cookie to verify your device authorization.
- Server & Security Telemetry: For security, fraud prevention, and chargeback disputes, our edge infrastructure (Cloudflare) logs IP addresses, browser user-agents, and cryptographic license validation events.
3. How We Use Your Information
Your information is used strictly for technical operation and account delivery:
- Generating and delivering single-user license keys.
- Authenticating access to offline-capable Progressive Web Apps (PWAs).
- Defending against payment fraud, license key piracy, and friendly fraud chargebacks.
- Sending critical account notices or product security updates.
4. Essential Security Cookies
Our applications utilize strictly necessary functional cookies required for session security and offline authentication. By logging into Gravorix web applications with a valid key, you consent to the storage of essential session tokens on your local device.
5. Third-Party Service Providers
We work with industry-standard, secure infrastructure partners to operate our platform:
- Payment Processing: Stripe (processes payments and handles checkout security).
- Edge Infrastructure: Cloudflare (provides SSL encryption, DDOS protection, and edge worker routing).
- Transactional Email: Resend (delivers order confirmation and access key emails).
6. Data Rights & Contact
You have the right to request information regarding your personal data or request deletion of your purchase record (subject to legal retention requirements for tax and chargeback auditing).
For any privacy inquiries or data requests, please contact support:
Email: [email protected]