Privacy Policy
1. Who we are#
Jaxresells ("we", "us", "our") operates the Jaxresells website and the Vendor Vault membership service (the "Service"). We are the data controller responsible for your personal data. For any privacy request, contact v3subusiness2@abv.bg.
2. Data we collect#
- Account data: email address and authentication identifiers you provide when signing up (email/password or Google).
- Billing data: subscription status, Stripe customer ID, plan and renewal date. Card details are entered on Stripe's hosted checkout and are never stored on our servers.
- Usage data: minimal, anonymized request logs used to keep the Service running and detect abuse.
- Optional submissions: affiliate applications (name, email, audience).
3. Legal basis for processing (GDPR)#
- Contract: to create your account, provide the Vendor Vault, and process your subscription.
- Legitimate interests: security, fraud prevention, and service improvement.
- Legal obligation: tax, accounting, and responding to lawful requests.
- Consent: for any optional marketing emails (you can withdraw at any time).
4. How we use your data#
- Authenticate you and grant access to paid content.
- Process subscription payments and renewals via Stripe.
- Deliver your membership benefits, including bonus materials such as the Reselling Playbook.
- Send transactional emails (account, billing, support replies).
- Protect the Service against abuse and enforce our Terms.
We do not sell your personal data and we do not use it for cross-context behavioral advertising.
5. Sub-processors we share data with#
- Supabase — authentication and database hosting (EU/US).
- Stripe — payment processing and subscription management.
- Cloudflare — hosting and DDoS protection.
Each sub-processor is bound by their own DPA and operates under SCCs where applicable for international transfers.
6. International data transfers#
If you access the Service from outside the country where our servers are located, your data may be transferred internationally. Where data is transferred outside the EEA/UK, we rely on Standard Contractual Clauses or equivalent safeguards.
7. Data retention#
- Account data: until you delete your account.
- Billing records: up to 7 years for tax/accounting compliance.
- Support emails: up to 24 months after the last interaction.
8. Your rights (GDPR / UK GDPR / CCPA)#
You have the right to:
- Access a copy of the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion ("right to be forgotten") of your account and data.
- Object to or restrict certain processing.
- Data portability (receive your data in a portable format).
- Withdraw consent at any time for consent-based processing.
- Lodge a complaint with your local supervisory authority.
To exercise any right, email v3subusiness2@abv.bg from your account address. We respond within 30 days.
9. Cookies#
We use only strictly necessary cookies for authentication and session management. We do not use third-party advertising or tracking cookies. Stripe may set cookies on its hosted checkout pages under its own privacy policy.
10. Security#
We use TLS in transit, encrypted database storage, row-level security policies, and the principle of least privilege. No system is perfectly secure; we encourage strong, unique passwords.
11. Children#
The Service is not directed to children under 16. We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
12. Changes to this policy#
We may update this policy. Material changes will be announced by email or in-app notice. Continued use after the effective date constitutes acceptance.
13. Contact#
Jaxresells — Data Protection
Email: v3subusiness2@abv.bg