Privacy Policy

Information We Collect

When you use TechFlowStore, we collect the following information:

• Account Information: Name, email address, and password (managed by Supabase Auth)
• Profile Information: Display name and profile avatar (optional)
• Order Information: Order history, payment status, and product purchases
• Payment References: Payment method and transaction references (we do not store card numbers)
• Wishlist: Products you save to your wishlist
• Reviews: Product reviews and ratings you submit
• Notifications: In-app notifications about orders and account activity

How We Use Your Information

We use your information to:

• Process and fulfill your orders
• Send transactional emails (order confirmations, payment receipts, product delivery)
• Manage your account and provide customer support
• Display your reviews and ratings on products
• Send in-app notifications about your orders
• Prevent fraud and abuse (rate limiting, security logging)
• Improve our services and user experience

Data Protection

We protect your data through:

• Encrypted storage of sensitive data (license keys, credentials) using AES-256-GCM
• Secure authentication via Supabase Auth with encrypted sessions
• Server-side authorization checks on all sensitive operations
• Rate limiting to prevent abuse
• Security event logging for suspicious activity
• Private storage for purchased digital files with time-limited access links

Third-Party Services

We use the following third-party services:

• Supabase: Authentication, database hosting, and file storage
• Payment Providers: CIB and EDAHABIA for payment processing (we do not store payment card details)
• Email Provider: Transactional email delivery (currently in development mode)

These services have their own privacy policies governing how they handle data.

Cookies & Sessions

TechFlowStore uses essential session cookies for authentication and session management. These cookies are necessary for the Platform to function. We do not use analytics, advertising, or tracking cookies. See our Cookie Policy for details.

Data Retention

We retain your data for as long as your account is active. When you delete your account:

• Your personal information is anonymized
• Your name is replaced with "Deleted User"
• Your email is anonymized
• Order history is preserved for business records but dissociated from your identity
• Your Supabase Auth account is deleted

Your Rights

You have the right to:

• Access your personal information
• Update your profile information
• Download your order history
• Delete your account
• Contact us with privacy-related questions

Security Logging

For security purposes, we log certain events such as rate limit violations, unauthorized access attempts, and payment verification events. These logs contain only operational data (masked user IDs, timestamps, event types) and do not contain passwords, license keys, or payment card details.

Contact

For privacy-related questions or requests, contact us through our Contact page or email support@techflowstore.com.