SEVSPRIG / STORE GUIDE
Privacy notice
What we use to run your account, deliver your purchases and help you.
Effective 8 November 2026 · Version 2026-11-08
Who is responsible
SevSprig, based in Bandung, Indonesia, operates this store and is responsible for its processing of customer personal information. Contact sevsprig@gmail.com for privacy questions and requests.
Information processed
Account information includes your email, account identifier, verification status and authentication data. Google sign-in may provide basic profile information and an email address; we do not receive your Google password. Purchase records include product, amount, order reference, payment status and purchase email. Support correspondence includes the information you choose to send. Hosting and service providers may process technical data such as IP addresses, device information and security logs.
Purposes and legal grounds
We use account and purchase data to operate the requested service, verify payments, deliver files and maintain purchase access. We also process information to prevent fraud, protect accounts, resolve disputes and meet applicable legal obligations. Where applicable, these activities rely on contract performance, legal obligations or legitimate interests in a secure service, with applicable balancing and objection rights. Consent is used where required for optional processing; a purchase does not automatically subscribe you to marketing.
Service providers and international processing
The current service uses Supabase for authentication, database and file storage, Vercel for hosting, Resend for transactional email, and Midtrans for payments. Google is involved if you choose Google sign-in. Providers receive the information needed for their roles and may have their own privacy terms. Payment credentials are entered through the payment provider rather than a SevSprig card-entry form. Providers may process information outside your country. Contact us for information about the providers and transfer arrangements relevant to your data. International processing remains subject to applicable data-protection requirements.
Cookies and browser storage
Essential cookies support login, OAuth security and access to an order receipt. The current login cookie lasts up to one hour, OAuth cookies up to ten minutes, and the order-receipt cookie up to one day. Favorites are stored locally in your browser until cleared. Session storage remembers the selected product and a checkout retry identifier. Clearing browser storage can remove favorites or sign you out; it does not delete paid purchase records. This store code does not currently include advertising trackers. Payment and sign-in providers operate under their own notices.
Retention and security
Purchase records support repeat downloads and license verification without a scheduled purchase expiry. Retention depends on the purpose: account information supports your active account; purchase and license records support continuing access and any applicable recordkeeping obligations; support records support resolving enquiries and disputes; technical logs support security and troubleshooting under provider retention settings. There is no single fixed retention period for every category. You can request a review or deletion of information that is no longer needed; any legally required retention will be explained. Deletion requests are handled through support, not an automatic account-deletion button. Paid product files are private and downloads require authorization. Product cover images are public; do not put confidential information in a cover. No online service can guarantee absolute security.
Your choices and requests
Depending on applicable law, you may request access, correction, a copy/export, deletion, restriction or objection to processing, and withdrawal of consent where processing relies on consent. Contact our support email with your request. We may verify account ownership and will respond within applicable legal deadlines. You may complain to the competent data-protection authority. Account deletion can prevent future library access; we will explain that consequence and any records that must be retained before completing a verified request.
Updates
Material changes to this notice will be communicated appropriately, and the effective date will be updated. New purposes requiring consent will not be introduced on the assumption that an earlier purchase provides that consent.