Privacy Policy

Who we are

Assetix Foundry ("we," "us," "the studio") is a digital-product studio based at R. Srg. José Paulo dos Santos 75, 1800-310 Lisboa, Portugal. We are the controller of the personal data described in this policy. For any privacy question or request, write to support@assetixfoundry.com.

What this policy covers

This policy explains what personal data assetixfoundry.com collects, why, and what rights you have over it. It applies to visitors browsing the site, buyers in the shop and commission checkout, and anyone who uses the contact form.

Data we collect

We collect only what a specific part of the site needs to function:

Browsing the site. No personal data is collected just by visiting — until you accept analytics cookies (see "Cookies and analytics" below).

The contact form. The name (optional), email address, company (optional) and message you enter. The form does not connect to a live inbox: nothing is transmitted automatically to a third party or stored on a server when you submit it, because the site is static and has none. If you want a reply, email support@assetixfoundry.com directly, quoting the reference shown on the confirmation panel.

Checkout. Email address, optional name and company, billing address and country, and — where you provide one — an EU VAT number. Card details are entered directly into our payment provider’s hosted fields; we never see or store them (see "Who we share data with").

Analytics, only after consent. If you accept analytics cookies, Google Analytics 4 collects anonymised usage data (pages visited, general location by IP, device type). Your IP address is anonymised before it’s stored. Analytics never runs before you consent, and never runs at all if you decline.

Why we collect it, and our legal basis

Checkout data is processed to form and fulfil a purchase contract with you (GDPR Art. 6(1)(b)).

Contact-form data is processed based on your consent, given by submitting the form (GDPR Art. 6(1)(a)).

Analytics data is processed only with your consent, given through the cookie banner (GDPR Art. 6(1)(a)); you can withdraw it at any time.

Legal-entity data on invoices (name, address, VAT number) is retained to meet our accounting and tax obligations under Portuguese and EU law (GDPR Art. 6(1)(c)).

Who we share data with

Payment. Card data is handled entirely by our hosted payment provider; Assetix Foundry never receives or stores it. When live commerce is enabled, our checkout provider (Lemon Squeezy) acts as merchant of record for EU sales — it processes your payment, calculates and remits VAT, issues your receipt and licence key, and sends your download links. It processes your order data as an independent controller for those purposes; see its own privacy policy at the time of purchase.

Analytics. Google Analytics 4, operated by Google Ireland Limited, processes anonymised usage data on our behalf, only after consent.

We do not sell personal data, and we do not share it with anyone else.

International transfers

Google Analytics may process data outside the EU/EEA. Where that happens, it relies on the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses as the transfer safeguard.

How long we keep data

Contact-form submissions: not stored server-side (there is no server) — nothing to retain beyond your own browser session.

Order and invoice data: kept for as long as Portuguese and EU tax law requires (currently up to 10 years for accounting records), held by our payment provider as merchant of record.

Analytics data: retained by Google Analytics for 14 months from collection, per its default retention setting, then deleted automatically.

Your rights

As an EU data subject, you have the right to:

access the personal data we (or our processors) hold about you;

ask us to correct inaccurate data;

ask us to erase data we no longer have a lawful basis to keep;

restrict or object to certain processing;

receive your data in a portable format;

withdraw consent at any time, without affecting processing carried out before withdrawal;

lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), Portugal’s supervisory authority, at www.cnpd.pt, or with the authority in your own EU country of residence.

To exercise any of these rights, email support@assetixfoundry.com. For payment and order data held by our checkout provider as merchant of record, we’ll direct your request appropriately or put you in touch with them directly.

Cookies and analytics

Full detail is in our Cookie Policy. In summary: strictly necessary storage (keeping your cart and your cookie choice) runs without asking, because the site can’t function without it. Google Analytics 4 is non-essential and loads only after you actively accept it in the cookie banner; you can withdraw consent at any time via "Cookie settings" in the footer.

Security

The site is served entirely as static files over HTTPS. Checkout runs on our payment provider’s PCI-compliant hosted infrastructure — card data never touches our systems. Because there is no application server, there is no customer database to be breached: this is a deliberate architectural choice, not just a policy statement.

Children

This site is intended for business use and is not directed at children. We do not knowingly collect personal data from anyone under 16.

Changes to this policy

We may update this policy as the site or our tools change. The effective date at the top always reflects the current version. Material changes will be reflected here; continued use of the site after an update means you accept the revised policy.

Contact us

Assetix Foundry, R. Srg. José Paulo dos Santos 75, 1800-310 Lisboa, Portugal — support@assetixfoundry.com.