Privacy Policy
Effective Date: October 18, 2026 • Compliant with International Data Protection Standards
Our Data Minimization Principle
Prowala (“we”, “our”, or “us”) is committed to preserving the privacy of every visitor and customer. We operate on the strict principle of data minimization: we collect only the minimal information strictly required to process, deliver, and warranty your digital product purchases.
We do not sell, rent, monetize, or broker personal information to advertisers or third-party data aggregators. Guest purchases are fully supported without forced account creation.
1. What Data We Collect
We collect strictly three categories of personal data:
Your full name or chosen display name used to address order correspondence and receipts.
Your primary contact address used to dispatch license keys, account credentials, and magic sign-in links.
Purchased items, chosen product variations, transaction references, payment proofs, and delivery timestamps.
We do NOT collect credit card numbers, sensitive biometric records, location telemetry, or advertising identifiers.
2. Purpose and Lawful Basis for Processing
Each item of data is processed strictly for contractual necessity and legitimate operational purposes:
| Data Category | Specific Purpose | Lawful Basis (GDPR Art. 6) |
|---|---|---|
| Name & Email | Delivering license credentials, receipts, and order updates via email. | Performance of Contract |
| Payment Proof / Reference | Verifying bank transfers and Binance Pay transactions to release goods. | Performance of Contract |
| Order & Warranty Log | Honoring 1-month to 1-year replacement warranties and resolving issues. | Legitimate Interests / Contract |
| Referral Code (Optional) | Attributing referral rewards and discount coupon codes to referrers. | Consent |
3. How Long We Keep Your Data
We retain personal data only for as long as is strictly necessary to fulfill the services requested and satisfy statutory legal or warranty obligations:
- Active Subscription Warranty Period: Order and delivery records are retained for the full duration of your product warranty (ranging from 1 month to 1 year) so our support team can verify credentials and replace access if needed.
- Tax & Accounting Records: Financial transaction summaries are retained for up to 3 years in accordance with applicable commercial accounting requirements.
- Account Information: Account profiles remain active until deletion is requested by the user. If an account has had no activity for 24 months, it is slated for automated purging.
4. Your Rights Under International Law
Regardless of your geographic location, Prowala accords all users rights consistent with the European General Data Protection Regulation (GDPR) and international privacy frameworks:
5. Infrastructure & Third-Party Service Providers
To deliver our services reliably, we utilize reputable, security-hardened infrastructure providers under strict confidentiality agreements:
- Resend: Used strictly for transmitting transactional purchase emails, delivery credentials, and magic login links.
- Supabase PostgreSQL: Cloud database storage protected with TLS encryption in transit and AES-256 encryption at rest.
- Vercel: Edge hosting and serverless compute infrastructure with global DDoS mitigation.
To exercise your right to access, rectify, or permanently delete your data, please submit your request to our data protection team: