DRAFT FOR REVIEW — Not legal advice. These policies are not lawyer-approved. Complete identity placeholders and obtain qualified legal review before accepting live payments.
Privacy policy
Also available in the Clark Tech Policies hub.
This Privacy Policy describes how Clark Tech handles personal information in the current application. It is a draft based on an implementation review — not a claim of certifications or practices that are not implemented.
Business identity (placeholders). Until the Owner completes these fields, treat them as incomplete:
- Legal entity: [LEGAL ENTITY NAME — TO BE PROVIDED BY OWNER]
- Mailing address: [REGISTERED MAILING ADDRESS — TO BE PROVIDED BY OWNER]
- Support email: [SUPPORT EMAIL — TO BE PROVIDED BY OWNER]
- Governing law: [GOVERNING LAW AND VENUE — TO BE PROVIDED BY OWNER]
Bracketed placeholders above must be completed by Clark Tech before relying on these policies for live sales.
Information we collect
- Account data: email and display name when you create a customer account or sign in (Supabase Auth when configured; local session cookies in development without Supabase).
- Order and entitlement data: order records, product entitlements, and download authorization events needed to fulfill Store purchases when payments are enabled.
- Owner Studio data: product listings, images, and private packages uploaded only by authorized Clark Tech personnel — customers do not upload catalog files.
- Technical data: basic request and security logs from hosting (for example Vercel), and hashed identifiers used for download rate limiting where implemented.
Cookies
Session cookies authenticate signed-in customers and Studio operators. Cart contents may be stored in a cookie so items persist between visits. This draft does not claim additional advertising or analytics cookies beyond what the deployed application actually loads.
Payment data
When checkout is enabled, card data is processed by the configured payment provider. Clark Tech does not store full card numbers. Live payments remain disabled until that provider and webhooks are configured and verified.
How we use information
To authenticate accounts, process orders, deliver downloads, operate Owner Studio for authorized personnel, prevent abuse, and respond to support requests through the Contact page.
Service providers
When configured: Supabase (authentication, database, private file storage); Vercel (hosting); a payment provider for checkout. Each processes data under its own terms. Do not treat this list as complete until counsel reviews the live configuration. Clark Tech does not claim specific security certifications in this draft.
Retention and deletion
Order and entitlement records are retained as needed for fulfillment, accounting, and dispute handling. Exact retention schedules are not invented here; they will be set with counsel. Account deletion or correction requests can be sent via Contact and may be limited where legal retention of order records applies.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, or obtain a portable copy of personal information, and to opt out of certain processing where applicable law provides those rights. Clark Tech will respond to verified requests through the Contact channel. This policy does not claim that Clark Tech “sells” personal information or that no tracking exists beyond what is described above — verify against the live build before making stronger statements.
Children
The Store is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). Clark Tech does not knowingly collect personal information from children for Store accounts.
Contact
Contact Clark Tech through the Contact page. A dedicated support mailbox is not published until verified ([SUPPORT EMAIL — TO BE PROVIDED BY OWNER]).
Clark Tech · Contact