Privacy Policy

This Privacy Policy describes how Regelant ("we", "us", or "our") collects, uses, and discloses your personal information when you visit regelant.com, install or use our software applications — including the Bulk Digital Downloads Shopify app — or otherwise communicate with us (collectively, the "Services"). For purposes of this Privacy Policy, "you" and "your" means you as the user of the Services, whether you are a merchant, an end customer of a merchant, a website visitor, or another individual whose information we have collected pursuant to this Privacy Policy.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you agree to the collection, use, and disclosure of your information as described here. If you do not agree, please do not use the Services.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the "Last updated" date above, and take any other steps required by applicable law.

How We Collect and Use Your Personal Information

To provide the Services, we collect personal information about you from a variety of sources, as set out below. The information we collect and use varies depending on how you interact with us. In addition to the specific uses set out below, we may use information we collect to communicate with you, provide the Services, comply with applicable legal obligations, enforce applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.

What Personal Information We Collect

The types of personal information we obtain depend on how you interact with our Services. When we use the term "personal information", we are referring to information that identifies, relates to, describes, or can be associated with you.

Information We Collect Directly from You

Information that you directly submit to us through the Services may include:

• Basic contact details including your name, email address, and (where applicable) business address.
• Account information including the Shopify shop domain you install the app on, the OAuth access token Shopify issues to us on install, and any account preferences you configure inside the app.
• Billing information handled by Shopify Billing — we do not see or store payment card details.
• Customer support information including the content of any message, attachment, or screenshot you choose to send when contacting us.

Information We Collect Automatically

We automatically collect certain information about your interaction with the Services ("Usage Data") using cookies, pixels, and similar technologies. Usage Data may include device information, browser information, network information, IP address, and information about how you access and use the Services (such as which features you use and how often, in order to enforce plan limits and improve the product).

Information We Process on Behalf of Merchants

When a merchant installs Bulk Digital Downloads, we process information from that merchant's Shopify store on the merchant's behalf, including:

• Product and variant metadata used to match digital files to products.
• Order information (order ID, customer email, line items) used to generate and deliver download links to the merchant's customers.
• The digital files the merchant uploads, which are stored in Cloudflare R2 and served via signed, expiring URLs.

We act as a data processor for this information; the merchant is the data controller and remains responsible for their own privacy obligations to their customers.

Information We Obtain from Third Parties

We may obtain information about you from third parties, including:

• Shopify, which provides the platform on which the app runs and supplies shop, product, order, and customer information via its APIs and webhooks.
• Service providers we work with — including Cloudflare (file storage and CDN), Resend (transactional email), and analytics/error-monitoring vendors — who may collect information on our behalf.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy. We are not responsible for the policies or practices of those third parties.

How We Use Your Personal Information

• Providing the app and Services. To install the app, authenticate API requests, store and serve the digital files merchants upload, generate and deliver download links to end customers, send transactional emails, and otherwise perform our contract with you.
• Plan enforcement and billing. To count uploads, downloads, and other usage so we can apply the limits of the plan a merchant is on, and to bill via Shopify Billing.
• Customer support. To respond to your messages and improve the Services.
• Security and fraud prevention. To detect, investigate, and take action regarding possible fraudulent, abusive, or malicious activity.
• Marketing and product communications. Where permitted by law, to send occasional product updates. You can opt out at any time using the unsubscribe link in any such email.
• Legal compliance. To comply with applicable laws, respond to lawful requests from public authorities, and enforce our terms.

Cookies

Like many websites, we use cookies and similar technologies on regelant.com and inside the embedded app to keep you signed in, remember preferences, and run analytics so we can understand how the product is used. Most browsers accept cookies by default, but you can set your browser to remove or reject them. Blocking cookies may cause some features to work incorrectly.

How We Disclose Personal Information

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes:

• Service providers who perform services on our behalf (e.g., cloud hosting, file storage, transactional email delivery, error monitoring, analytics, customer support tooling).
• Shopify, as the platform on which the app runs and through which billing is processed.
• With your direction or consent, such as when you ask us to share information with a third party.
• In connection with a business transaction such as a merger, acquisition, or asset sale; to comply with applicable legal obligations, including responses to subpoenas or similar requests; to enforce our terms of service; and to protect the rights, property, or safety of Regelant, our users, or others.

We do not sell your personal information, and we do not share it with third parties for their own targeted advertising.

Where We Store and Process Data

The Services are operated from the United States and our infrastructure providers (including Cloudflare) operate globally. Your information may be processed in countries other than the one in which you reside. Where required by law, we put appropriate safeguards in place for international transfers.

Security and Retention of Your Information

We use reasonable technical and organizational measures to protect your information, including encryption in transit, access controls, and signed, expiring URLs for downloadable files. No security measures are perfect or impenetrable, and we cannot guarantee "perfect security."

How long we retain your personal information depends on the purpose for which it was collected — for example, whether we need it to maintain your account, provide the Services, comply with legal obligations, or resolve disputes. Merchant data is automatically purged after the app is uninstalled, in accordance with Shopify's required uninstall webhook and a short retention window for compliance with Shopify's customer data request webhooks.

Your Rights and Choices

Depending on where you live, you may have some or all of the following rights with respect to your personal information. These rights are not absolute and may not apply in every situation.

• Access / Know. You may request access to the personal information we hold about you.
• Delete. You may request that we delete personal information we maintain about you.
• Correct. You may request that we correct inaccurate personal information.
• Portability. You may request a copy of your personal information in a portable format.
• Withdraw consent. Where we rely on consent, you may withdraw it at any time.
• Restriction or objection. You may ask us to restrict or object to certain processing of your personal information.
• Appeal. If we deny your request, you may have the right to appeal our decision by replying to our denial.
• Manage communications. You can opt out of marketing emails using the unsubscribe link in any such email.

To exercise any of these rights, email us at contact@regelant.com. We may need to verify your identity before responding. We will not discriminate against you for exercising any of these rights.

Children's Data

The Services are not intended to be used by children, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at contact@regelant.com and we will take steps to delete it.

Third Party Websites and Links

The Services may contain links to websites operated by third parties. We are not responsible for the privacy or security of those sites. If you follow a link to a third-party site, please review its privacy policy.

Contact

If you have questions about this Privacy Policy or our data practices, or if you would like to exercise any of your rights, please contact us at contact@regelant.com.