Privacy Policy
MonoCanvas ("we," "us") operates monocanvas.com. This Privacy Policy explains what personal information we collect, why, and your rights over it.
What we collect
- Email address — used to send your order receipt, your downloads, and (only if you opt in) occasional promotional emails.
- First name — used to address you in your receipt and on your account portal. Optional and not required to receive your purchase.
- Order details — what you bought, when, the PayPal transaction reference. Retained for accounting and refund handling.
- IP address and user-agent — recorded only when you download a file, solely to detect abusive sharing. Retained 90 days.
- Browser cookies — exactly one cookie (cc_session) used to keep you signed in. We do not set advertising or tracking cookies.
What we do NOT collect
- We do not collect your mailing address (you're buying a digital file).
- We do not collect your phone number.
- We do not see or store your credit card or bank details. Payment is handled entirely by PayPal.
- We do not run third-party analytics, advertising, or tracking pixels.
How we use it
Your email is used to: (1) send order receipts, OTP login codes, and refund notices; (2) deliver marketing emails if and only if you ticked the opt-in box at checkout; (3) recognise you on return visits to your downloads portal.
Who we share with
We share email and order data only with these processors: PayPal (payment), Resend (transactional email), Loops (marketing email — only if you opted in), Bunny.net (hosting/serving downloads), Zoho Mail (receiving support email), Cloudflare (DNS and edge protection). Each is GDPR-aligned. We sell or rent nothing.
Your rights
You can: (1) access the personal data we hold — email support@monocanvas.com from your registered address; (2) correct it; (3) delete it (we anonymise past orders and remove your profile); (4) export it as JSON; (5) unsubscribe from marketing in one click via any marketing email. Transactional emails (receipts, login codes) continue regardless under "performance of contract" (GDPR Art. 6(1)(b)).
Retention
Order records: 7 years (tax/accounting). Download logs: 90 days. Marketing contact data: until you unsubscribe or 24 months of inactivity, whichever is first.
Contact
For privacy questions: support@monocanvas.com.