Privacy
Last updated: September 2026
What we collect
| Data | Why | Where it lives |
|---|---|---|
| Email address | To send your download link and updates | Stripe, Resend |
| Payment details | To process your purchase | Stripe only. We never see your card number. |
| Billing address | Tax determination, fraud prevention | Stripe |
| Purchase record | To verify download eligibility and support refunds | Stripe |
| Page and checkout events | To measure advertising and improve the purchase journey, when you allow it | Meta |
| Device, browser, IP address and Meta identifiers | To attribute consenting visits and purchases to ads | Meta |
| Hashed contact and purchase data | To match a confirmed purchase to the ad that led to it, when you allow it | Meta |
| Campaign and click parameters | To attribute consenting visits and Stripe purchases to campaigns | UTMify, Stripe |
Advertising measurement
If you select “Allow measurement,” we use the Meta Pixel in your browser and Meta Conversions API on our server. These tools record page views, offer views, checkout starts and confirmed purchases. A Purchase is sent only after Stripe confirms payment and includes the actual order value, USD currency, product, quantity and a stable order/event ID. Contact data used for matching is normalized and SHA-256 hashed before it is sent to Meta. We never send card details to Meta.
Browser and server events share the same event ID so Meta can deduplicate them. Declining measurement does not affect checkout, delivery, refunds or access to purchased files.
With the same permission, UTMify stores campaign parameters such as source, campaign, ad and click identifiers and connects them to the Stripe Checkout reference. This lets us compare advertising spend with confirmed sales. We do not use UTMify's back-button redirect script.
lets you change your choice at any time. You can also review Meta’s Privacy Policy.
Retention
Purchase records are retained for as long as required for accounting and to honor your license. You can ask us to delete your email from our update list at any time.
Your rights
You can ask what we hold about you, ask us to correct it, or ask us to delete it. Email contato@vellumdigital.com.br and we will respond within 30 days. Depending on where you live you may have further rights, including the right to opt out of advertising-related sharing. Brazilian residents have the rights set out in the LGPD.
Processors
- Stripe — payments
- Vercel — hosting and file storage
- Resend — transactional email
- Meta — advertising measurement, only when allowed
- UTMify — campaign and sales attribution, only when allowed
Contact
contato@vellumdigital.com.br