Privacy Policy

Last updated: September 2026

1. What we collect

Email (required), name (optional), country (auto-detected), order history. No tracking cookies.

2. Payment

Processed by Razorpay (PCI-DSS compliant). We never see your card details.

3. Data storage

Cloudflare D1 + R2, encrypted in transit and at rest. PDFs in private R2 bucket.

4. Cookies

Only um_session (HttpOnly, 30 days). No tracking cookies.