Privacy Policy

1. Who we are

KlipPack ("we", "us") operates klippack.com and sells downloadable real estate deal tools, calculators, contracts, scripts, and SOPs. This policy explains what information we collect, why we collect it, and how we protect it.

2. Information we collect

• Account & purchase data, name, email address, and billing country at checkout. Payment details (card numbers, CVV) are collected and processed by Stripe and never touch our servers.
• Newsletter subscriptions, email address and opt-in timestamp when you subscribe. Stored in Cloudflare KV, a zero-trust key-value store.
• Support messages, contents of emails or contact-form submissions you send to us.
• Technical logs, IP address, user agent, and pages requested, retained for up to 14 days for abuse prevention.

3. How we use it

We only use your data to:

• Deliver products you have purchased and the product updates that follow.
• Send transactional emails (receipts, download links, product updates).
• Send newsletter content only if you explicitly opted in.
• Detect fraud, abuse, and denial-of-service attempts.
• Respond to your support inquiries.

We never sell your personal data. We do not run third-party ad tracking or cross-site pixels on klippack.com. We keep data collection intentionally narrow: enough to deliver purchases, provide support, and protect the site from abuse.

4. Processors we use

• Stripe, payment processing. Stripe's privacy policy applies to card data.
• Cloudflare, hosting, CDN, edge compute, and storage (Workers, Pages, KV, R2). No data is retained in logs beyond 14 days.
• Cloudflare Web Analytics, privacy-first, cookieless visitor analytics. Does not fingerprint visitors. Used only to measure page views and aggregate referrers.
• Cloudflare Turnstile, CAPTCHA challenge on forms (newsletter, contact, reviews). Replaces invasive trackers; no cross-site profiling.
• Email delivery, transactional email sent through Cloudflare Email Workers or Zeptomail. Delivery logs retained up to 30 days.

We load a small first-party script at /tracking.js on every page; it boots Cloudflare Web Analytics and reserves placeholders for Google Tag Manager / Meta Pixel that are currently disabled. Those placeholders only activate after a consent banner is added and you explicitly accept — see the Cookie Policy for the current state.

All processors operate under GDPR-compatible Data Processing Agreements.

5. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete any personal data we hold about you. Email [email protected] and we will respond within 30 days. EU/UK residents may also contact their local data protection authority.

6. Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you specific rights about your personal information.

(a) Categories of personal information we collect:

• Identifiers, email address.
• Commercial information, order history, products purchased.
• Financial information, payment is processed by Stripe; we do not store card numbers.
• Internet / network activity, IP address and request logs collected for security and fraud prevention.

(b) Sources: directly from you (checkout, newsletter, contact form) and automatically (server logs, Cloudflare edge).

(c) Business purposes: fulfilling orders, sending product updates, providing support, preventing fraud and abuse, complying with tax and legal obligations.

(d) Sale or sharing: We do not sell or share personal information for cross-context behavioral advertising or for monetary or other valuable consideration.

(e) Your rights: right to know what we collect, right to delete, right to correct, right to opt-out of sale/sharing (not applicable. We don't sell or share), and right to limit use of sensitive personal information (we do not collect sensitive PI).

(f) How to exercise rights: email [email protected] from the address on file. We will verify your identity and respond within 45 days.

(g) Non-discrimination: we will not deny service, charge different prices, or provide a different level of quality because you exercised any CCPA right.

7. GDPR Legal Basis (EU/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases, depending on the purpose:

• Contract (Art. 6(1)(b)), to fulfill your order, deliver downloads, and send product updates for products you have purchased.
• Consent (Art. 6(1)(a)), newsletter subscriptions. You can withdraw consent at any time via the unsubscribe link.
• Legitimate Interests (Art. 6(1)(f)), fraud prevention, site security, and aggregate analytics. We balance these interests against your rights.
• Legal Obligation (Art. 6(1)(c)), retention of order and tax records for the period required by applicable tax law.

You may also lodge a complaint with your local data protection authority.

8. Data Retention

We keep personal data only as long as necessary for the purpose collected:

9. Cookies

KlipPack uses strictly-necessary cookies and a single functional affiliate-attribution cookie. We do not set advertising cookies. See the full Cookie Policy for details.

10. Security

All traffic is encrypted in transit via TLS 1.3. Order and subscriber records are stored in Cloudflare's encrypted key-value storage. Payment information is tokenized by Stripe and never leaves their infrastructure.

11. Contact

Questions about this policy? Email [email protected] or use the contact form.