1. Who this policy covers
This policy describes how Digilaine("we", "us") collects, uses, discloses, and protects personal information when you use our websites, applications, and related services (collectively, the "Services") as a creator, team member, or other registered user.
If you are buying a digital product from a creator's storefront, our Customer privacy policy explains how we handle buyer-related data in that context. Creators remain responsible for their own marketing lists, product promises, and any personal data they collect outside what Digilaine hosts for them.
2. Information we collect
- Account and profile. Name, email address, password hash, profile and storefront fields you choose to provide (for example display name, public handle, bio, social links, branding preferences).
- Billing and monetization. Subscription status, plan, Stripe identifiers, Connect account status, invoices, tax or business identifiers you submit, and related metadata needed to calculate fees and comply with payment rules.
- Content and product data. Projects, generated or uploaded copy, product metadata, files you upload for delivery, sales-page content, and customer-facing materials you publish through the Services.
- Transactions and delivery. Order references, purchaser email (where we facilitate delivery), download or access events, and support tickets tied to those orders.
- Technical and security data. IP address, device and browser type, approximate location derived from IP, timestamps, diagnostic logs, cookies, and similar technologies described in our Cookie policy.
- Communications. Messages you send us (including forms and email), survey responses, and metadata needed to route and archive support.
3. How we use information
We use personal information to:
- Provide, operate, secure, and improve the Services;
- Authenticate users, prevent fraud and abuse, and enforce our policies;
- Process payments, payouts, credits, chargebacks, and accounting records;
- Deliver digital products and access links to customers on your behalf where the product flow uses our infrastructure;
- Send service-related notices (security alerts, receipts, billing changes) and, where permitted, product updates;
- Meet legal, regulatory, tax, and audit obligations; and
- Analyze aggregated or de-identified usage to understand reliability and performance.
Where the GDPR or similar laws apply, we rely on appropriate bases such as performance of a contract, legitimate interests that are not overridden by your rights, compliance with legal obligations, and consent where required (for example optional marketing or non-essential cookies).
4. How we share information
We share personal information with vendors and partners who process data on our instructions ("processors"), including payment processors (such as Stripe), cloud hosting and database providers, email delivery services, authentication and security vendors, and analytics providers where enabled. We require confidentiality and appropriate safeguards by contract where feasible.
Current subprocessors commonly used to operate the Services include:
- Supabase — authentication, database, and file storage;
- Stripe — payments, payouts (Connect), billing, and tax calculation features where enabled;
- Resend — transactional and product-update email delivery;
- OpenAI — AI-assisted drafting and related model features (subject to safety checks);
- Vercel — application hosting and edge delivery;
- Google — optional sign-in via OAuth when you choose Google authentication;
- Unsplash — optional stock imagery when enabled; and
- PDF rendering infrastructure (for example Gotenberg or Chromium-based renderers) — converting product HTML to downloadable PDFs.
We may disclose information if we believe in good faith that access, use, preservation, or disclosure is reasonably necessary to (a) satisfy applicable law, regulation, legal process, or governmental request; (b) enforce our agreements or policies; (c) detect, prevent, or otherwise address fraud, security, or technical issues; or (d) protect the rights, property, or safety of Digilaine, our users, or the public, as required or permitted by law.
We do not sell your personal information as that term is commonly understood in U.S. state privacy laws. We do not share personal information with third parties for their own independent marketing without consent where consent is required.
5. International transfers
We may process and store information in the United States and other countries where we or our processors operate. Those countries may have data protection laws that differ from your own. Where required, we use appropriate safeguards (such as standard contractual clauses approved by the European Commission) for transfers from the EEA, UK, or Switzerland.
6. Retention
We retain personal information for as long as your account is active, as needed to provide the Services, and as necessary to comply with legal, tax, accounting, and dispute-resolution obligations. Backup and archival systems may retain copies for a limited additional period. When retention periods expire, we delete or de-identify information where feasible.
7. Security
We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, or alteration. No method of transmission over the Internet is completely secure; we cannot guarantee absolute security.
8. Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or export certain personal information; to object to or restrict certain processing; to withdraw consent where processing is based on consent; and to lodge a complaint with a supervisory authority. California residents may have additional rights under the CPRA (including to know, delete, and correct personal information, and to limit use of sensitive personal information where applicable).
To exercise rights, email support@us.digilaine.com with "Privacy request" in the subject line and enough detail for us to verify your identity. Signed-in creators can also export account data or delete their account from Settings → Account, and manage product-update email preferences there. We will respond within the timeframes required by applicable law. You may also use our contact form.
9. Automated features, AI-assisted outputs, and creator content
Parts of the Services use automated and machine-assisted systems (including large language models and related tools) to suggest or generate drafts, layouts, copy, and similar assets. Outputs may be inaccurate, incomplete, or unsuitable for your jurisdiction or use case. You are solely responsible for reviewing, editing, and legally clearing anything you publish or sell, and for ensuring that products and sales pages comply with advertising, consumer-protection, intellectual-property, and industry rules that apply to you.
We may log technical metadata about generation requests (for example timestamps, rough token counts, and error diagnostics) to operate, secure, and improve the Services. We do not use those logs to train public third-party models unless we tell you otherwise in product settings or a separate agreement.
10. Disclaimers; how we protect you and your customers
Independent creators. Creators who sell through storefronts powered by Digilaineare independent businesses. Unless we say otherwise in writing, we do not employ creators, endorse specific products, or verify every claim on a sales page. How a creator uses buyer email addresses or other personal data in their own CRM, email tool, or community is outside our control and is governed by the creator's own notices and policies.
Our role. For creator accounts, we generally act as a controller of account, billing, security, and platform analytics data. For checkout and delivery flows that run on our infrastructure, we may also process buyer data as described in our Customer privacy policy to complete the transaction, fight fraud, and meet legal obligations. Nothing in this policy makes us the seller of your digital goods to end customers—you remain responsible for what you offer and how you support buyers.
No professional advice. This policy is not legal, tax, accounting, or security advice. It does not waive any rights you cannot waive under mandatory law.
11. Children
The Services are not directed to children under 16 (or the higher age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, contact us and we will take appropriate steps to investigate and delete it where required.
12. Changes to this policy
We may update this policy from time to time. We will post the revised version on this page and update the effective date. If changes are material, we will provide additional notice as required by law (for example by email or in-product message).
13. Contact
Questions about this policy: support@us.digilaine.com.