HKC Marketrespects your privacy. This policy describes what information we collect, how we use it, who we share it with, and the choices you have. If anything here isn't clear, email hello@hkcmarket.comand we'll answer plainly.
Information we collect
Information you give us
- Email address when you sign in (we use magic links, no passwords).
- Payment information when you make a purchase. Payment details (card numbers, expiry, CVV) are handled entirely by Stripe; we never see or store them. We receive a Stripe customer ID and the amount/status of each transaction.
- Profile information you choose to add: display name, avatar (future), preferences.
Information we collect automatically
- Usage data: pages visited, files viewed, search queries, filters used, ratings given, purchases. This powers recommendations and helps us improve the site.
- Device data: browser type, operating system, screen size, approximate geographic region (from IP). Used for performance monitoring and to render the site correctly.
- Cookies and similar technologies. See our Cookie Notice for specifics.
How we use it
- Deliver the service: show you cut files, process purchases, send download links.
- Send transactional emails (sign-in links and purchase receipts).
- Personalize recommendations based on what you browse, rate, and buy.
- Monitor performance and security, diagnose bugs, and prevent abuse.
- Send promotional emails only if you've explicitly opted in. You can unsubscribe at any time with one click.
- Comply with legal obligations (tax records, fraud prevention, lawful requests).
Who we share it with
We don't sell your data. We share only what's necessary to run the service:
- Stripe - payment processing
- Resend - transactional and promotional email delivery
- Vercel - hosting, edge delivery, web analytics
- Supabase - database and authentication infrastructure
- Cloudflare R2 - file storage and download delivery
- Airtable - internal content management (we do not share your personal data here)
Each of these providers has their own privacy commitments. We only share the minimum information they need to do their specific job.
How long we keep it
- Account data: for the life of your account plus a short retention window after deletion (typically 30 days) for recovery purposes.
- Purchase and transaction records: kept for as long as required by tax and accounting law (typically 7 years).
- Usage events: raw events for up to 2 years; aggregated statistics indefinitely.
- Email logs (deliveries, bounces): 12 months.
- Download IP addresses are kept for 90 days for security, then deleted.
Your rights
You have the right to:
- Access a copy of your personal data we hold.
- Correct information that's inaccurate or incomplete.
- Delete your account and the personal data tied to it.
- Export your data in a portable format.
- Opt out of marketing emails at any time.
- Withdraw consent for optional processing (e.g., analytics cookies).
To exercise any of these, email privacy@hkcmarket.com. We'll respond within 30 days.
California residents (CCPA/CPRA)
California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act, including the right to know what personal information we collect, the right to delete it, and the right to opt out of any sale or sharing of personal information. We do not sell personal information.
EU/UK residents (GDPR/UK GDPR)
If you're in the European Economic Area or United Kingdom, our lawful bases for processing are: contract(to provide the service you've asked for), consent (for optional tracking and marketing), legitimate interests (security, fraud prevention, product improvement), and legal obligation (tax, accounting). You can lodge a complaint with your local supervisory authority.
Children
HKC Marketis not intended for children under 13. We don't knowingly collect personal information from anyone under 13. If you believe a child has given us information, contact us and we'll delete it.
Security
We use industry-standard protections: HTTPS everywhere, encrypted database connections, hashed tokens for magic links, role-based access controls on backend data. No system is perfectly secure, but we treat your data seriously.
Changes
When we update this policy materially, we'll post the new version here with an updated "Last updated" date and, if the changes affect how we use your data, notify you by email.
Contact
Questions, corrections, or concerns? Email privacy@hkcmarket.com.