Privacy Policy

Microstart ("we", "us", "our") is committed to protecting your privacy. This policy explains what personal data we collect when you visit our site or purchase a product, how we use it, and your rights regarding that data. We collect only what is necessary to run the store and deliver your purchases.

Account data: When you create an account we collect your email address and, optionally, your name.

Purchase data: When you buy a product we collect your email address and the details of your order (product, price, date). Payment details — card number, CVV, billing address — are collected and processed directly by Stripe. We never see or store your full card details.

Usage data: We may collect basic analytics such as pages visited, referrer URL, browser type, and general geographic region. This is used solely to understand how the site is being used and to improve it. We do not sell this data.

Cookies: We use essential cookies for session management and authentication. We do not use advertising or tracking cookies.

— To create and manage your account. — To process your orders and deliver purchased products. — To send transactional emails (order confirmation, download links, password reset). We do not send marketing emails without your explicit consent. — To respond to support requests. — To improve the site based on aggregated, anonymised usage data. — To comply with legal obligations.

We use a small number of trusted third-party services to operate the store:

Stripe — payment processing. Stripe may collect and use your payment data under their own privacy policy (stripe.com/privacy).

Convex — our real-time backend database. Your account and order data is stored on Convex's infrastructure, which is hosted on AWS with data encrypted at rest and in transit.

Cloudflare — content delivery and asset storage (R2). Cloudflare processes request data as described in their privacy policy (cloudflare.com/privacypolicy).

Resend — transactional email delivery. Your email address is shared with Resend solely to deliver emails you have triggered (order confirmations, etc.).

We do not share your personal data with advertisers, data brokers, or any other third parties not listed above.

We retain your account data for as long as your account is active. If you delete your account, your personal data is removed within 30 days, except where we are required to retain it for legal or financial compliance (e.g. transaction records, which are kept for 7 years in line with accounting requirements).

Order records are retained for tax and compliance purposes even after account deletion.

Depending on your jurisdiction you may have the following rights:

— Access: Request a copy of the personal data we hold about you. — Correction: Request that we correct inaccurate data. — Deletion: Request that we delete your personal data, subject to legal retention requirements. — Portability: Request your data in a machine-readable format. — Objection: Object to certain types of processing.

To exercise any of these rights, email hello@microstart.dev with the subject "Privacy Request". We will respond within 30 days.

We take reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), encrypted storage, and access controls. However, no system is completely secure. If you suspect unauthorised access to your account, contact us immediately at hello@microstart.dev.

Microstart is not directed at children under the age of 16. We do not knowingly collect personal data from anyone under 16. If you believe we have inadvertently collected such data, contact us and we will delete it promptly.

We may update this policy from time to time. When we do, we will update the effective date at the top of this page. For significant changes we will notify account holders by email. Continued use of the site after changes constitutes acceptance of the revised policy.

For any privacy-related questions or requests, contact us at hello@microstart.dev. We aim to respond within 2 business days.