Privacy Policy

Last updated: April 26, 2026

This Privacy Policy describes how Shopfolio ("we," "us," or "our"), operated by Stewart Family Enterprises LLC, collects, uses, and protects information when you purchase a product or interact with our Service.

Information we collect

Email address — required to deliver your download link after purchase.
Payment information — processed directly by Stripe, Inc. We never see, store, or have access to your credit card number, CVV, or full billing details. We receive only your email address, billing name (if provided), and a Stripe transaction ID.
Delivery metadata — our email provider (Resend) logs delivery status for a limited window (typically 30 days) for troubleshooting delivery issues.

What we do NOT collect

We do NOT use cookies (no tracking cookies, no session cookies, no cookie banners).
We do NOT use third-party analytics scripts (no Google Analytics, no Meta Pixel, no tracking pixels).
We do NOT fingerprint your browser or device.
We do NOT build user profiles or track your behavior across sessions.

How we use your information

To deliver your purchased product(s) via email;
To respond to support questions you send us;
To send product updates, only if you have explicitly opted in;
To comply with tax reporting and other legal obligations.

We do NOT sell or share your data

We do not sell, rent, trade, or share your personal information with third parties for marketing purposes. Period.

Third-party services

We use the following third-party services to operate Shopfolio:

Stripe — payment processing. Stripe handles all payment data under PCI-DSS Level 1 compliance. Stripe Privacy Policy.
Resend — transactional email delivery (sending your download link). Resend Privacy Policy.
Cloudflare — website hosting and content delivery. Cloudflare Privacy Policy.

Data retention

We retain purchase records (email, transaction ID, product purchased, date) for tax and legal compliance purposes. Stripe retains its own transaction records independently per its retention policies and applicable law.

Data security

Payment data is handled by Stripe under PCI-DSS Level 1 compliance. Product files are stored on Cloudflare R2 (encrypted in transit via HTTPS, at rest via Cloudflare). Download URLs are cryptographically signed and expire after 48 hours.

Your rights

Regardless of where you live, you have the right to:

Access — request a copy of the personal data we hold about you;
Deletion — request deletion of your personal information;
Correction — request correction of inaccurate data;
Portability — receive your data in a portable format.

To exercise any of these rights, email orders@shopfolio.store. We honor requests within 30 days.

Our legal basis for processing your personal data is contract performance (we need your email to deliver the product you purchased). We do not process data based on consent or legitimate interest for marketing. You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.

For California residents (CCPA)

Under the California Consumer Privacy Act, you have the right to know what personal information we collect and how we use it (described above), the right to request deletion, and the right to non-discrimination for exercising your privacy rights. We do not sell personal information as defined by the CCPA.

Children

The Service is not directed at children under 13. We do not knowingly collect information from children.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be posted to this page with an updated "Last updated" date.

Contact

Stewart Family Enterprises LLC
Privacy inquiries: orders@shopfolio.store