Your data is yours.
Here's exactly what we touch.

1 What we collect

When you use ExitLogic, we collect:

• Account information — name and email address when you register or purchase.
• Purchase data — what you bought, when, and at what price. Retained for legal and accounting purposes.
• Payment data — handled entirely by Stripe. We never see or store your card number.
• Usage data — pages visited, time on page, clicks. Used to improve the product, not to profile you.
• Newsletter subscription — your email only, if you opt in.
• Support messages — the content of emails you send us, to resolve your issue.

2 How we use it

We use your data to:

• Process and deliver your audit purchases
• Send order confirmations and receipts
• Send the Weekly Teardown newsletter (only if you subscribed)
• Improve the marketplace — which categories are most used, what converts best
• Respond to your support messages
• Comply with legal and tax obligations

We do not use your data to serve you advertising. We do not build behavioral profiles for sale. We do not share your purchase history with audit authors — they receive fulfillment notices only.

3 Who we share it with

We share your data with as few third parties as possible:

• Stripe — payment processing. Subject to Stripe's privacy policy.
• Mailchimp / ConvertKit — newsletter delivery, if you subscribed.
• Cloudflare — CDN and DDoS protection. Sees request metadata, not content.
• Google Analytics — anonymized usage data. IP anonymization is enabled.

We do not sell your data to anyone. Ever.

4 Cookies

We use cookies for session management (keeping you logged in), shopping cart state, and basic analytics. We do not use advertising cookies or third-party tracking pixels beyond anonymized analytics. See our Cookies Policy for the full list.

5 Your rights

You have the right to:

• Access all data we hold about you
• Correct inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format
• Withdraw consent for newsletter emails at any time (unsubscribe link in every email)
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email info@exitlogic.io. We respond within 7 business days.

6 Security

All data is transmitted over HTTPS. Passwords are hashed using bcrypt. We conduct security reviews quarterly. Payment data is never stored on our servers — Stripe handles tokenization. If we ever become aware of a breach that affects your data, we'll notify you within 72 hours.

7 Contact

Questions about this policy? Email info@exitlogic.io. We're real people and we actually reply.