Vega Press — Privacy Policy

Last updated: 5 August 2026

Vega Press ("we", "us", "our") operates the website at vegapress.store and sells digital products through Gumroad. This policy explains what data we collect, how we use it, and the rights you have.

1. Data We Collect

1.1 Data you provide directly

• Purchases: When you buy a product, Gumroad (our merchant of record) processes your payment and stores your name, email, and transaction details. We receive your email address and purchase record from Gumroad so we can deliver your product. We do not see or store your card details.
• Contact: If you email us at vegapress@zohomail.eu, we keep the correspondence to resolve your query.

1.2 Data collected automatically

• Server logs: Our web server (vegapress.store) logs standard request data — IP address, browser type, pages visited, and timestamp — for security and basic analytics. These logs are retained for up to 30 days.
• Cookies: We use a single session cookie to authenticate access to our internal tools. No third-party tracking cookies are set.

2. How We Use Your Data

• To deliver digital products you have purchased.
• To respond to support requests.
• To maintain the security and availability of our website.
• To understand which products are visited, so we can improve our storefront.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

3. Pinterest Integration

We use the Pinterest API v5 to publish pins about our products and to read basic analytics (impressions, clicks) on those pins. When you interact with our pins on Pinterest, Pinterest collects data according to Pinterest's own Privacy Policy. Our use of the Pinterest API is governed by the Pinterest Developer Terms of Service.

Through the Pinterest API we may access:

• Your Pinterest account's public profile information (name, username, profile image) — only if you explicitly authorize our app via the Pinterest OAuth flow.
• Analytics data for pins we have created (impression counts, click counts).

We do not request access to your private boards, secret pins, or personal Pinterest data beyond what is necessary to publish and measure our own pins.

3.1 OAuth scopes we request

If you authorize our Pinterest app, we request only the following scopes:

• boards:read — to list boards we can post to.
• boards:write — to create boards for organizing our pins.
• pins:read — to read analytics on pins we have created.
• pins:write — to create pins for our products.
• user_accounts:read — to verify the connected account.

We do not request pins:write_secret, boards:read_secret, boards:write_secret, or any ads/catalogs/billing scopes.

3.2 Data storage

OAuth tokens (access token and refresh token) are stored securely on our server and are used solely to publish and measure pins. They are never shared, transmitted to third parties, or embedded in client-side code. If you revoke access, we delete the tokens within 48 hours.

4. Data Retention

• Purchase records: retained for as long as necessary to provide access to your products and meet tax obligations.
• Server logs: up to 30 days.
• Support emails: up to 12 months after the last correspondence.
• Pinterest OAuth tokens: until access is revoked or the tokens expire.

5. Your Rights (GDPR / CCPA)

You have the right to:

• Request a copy of the personal data we hold about you.
• Request correction or deletion of your data.
• Object to processing or request restriction.
• Withdraw consent for Pinterest integration at any time by revoking the app in your Pinterest settings.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email vegapress@zohomail.eu. We respond within 30 days.

6. Security

We use HTTPS for all connections. OAuth tokens and credentials are stored in environment files with restricted permissions. We do not store credit card data — all payments are processed by Gumroad, which is PCI-DSS compliant.

7. Children's Privacy

Our products and website are not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us with data, please contact us and we will delete it.

8. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be noted on our storefront.

9. Contact

Questions about this policy or your data? Email vegapress@zohomail.eu.