Legal · Policies
Privacy Policy
More
Order records may be kept up to 5 years. Inactive seller accounts are noticed and purged on a ~1-year inactivity clock. Contact contact@filvendo.com for rights requests.
Full text
Skim the summary above, then read the clauses below.
1. Overview
GT (“Company”) operates Filvendo and publishes this Privacy Policy to explain how personal data is processed.
2. Purposes
- Seller registration, authentication, account management, withdrawal
- Listings, orders, Lemon Squeezy payment confirmation, downloads, order lookup
- Seller subscription status and Filvendo annual billing coordination
- Support, dispute handling, fraud prevention
- Inactivity notices and retention / deletion schedules
- Legal obligations and service security / statistics
3. Data we collect
| Role | Data | When |
|---|---|---|
| Seller | Display name, email, password hash, sessions, last activity, subscription / Lemon Squeezy IDs and webhook secret (if saved), listing and order records. Legacy bank payout fields may remain on old records until purged. | Sign-up, login, listing, billing settings |
| Buyer | Email (required), order / payment identifiers, payment status, download token and expiry. No separate buyer SaaS account. | Purchase, order lookup, seller inquiry |
| Automatic | Access logs, device/browser, IP, cookies/sessions, error/security logs | While using the service |
| Payments | Product checkout is handled by Lemon Squeezy on the seller’s store; Filvendo keeps order ID, status, and minimal fulfillment metadata. Seller subscription billing is also via Lemon Squeezy on Filvendo’s store. | Checkout / webhook |
4. Retention
We keep data only as long as needed for the purpose, then delete or anonymize per law and the schedule below.
| Category | Period | Disposal |
|---|---|---|
| Orders / payment / ledger | 5 years | Anonymize buyer email / tokens; purge expired ledger rows |
| Active seller account | Until withdrawal (see inactivity) | On withdraw: clear credentials; display name becomes closed account |
| Inactive seller | ~1 year from last activity | Email notice ~30 days before purge; login/listing extends the clock; then purge account PII (orders may remain up to 5 years) |
| Withdrawn seller identifiers | Up to 5 years after withdraw | Delete account record when due and no related orders remain |
| Purchased files | ~90-day download window | Delete after expiry (including withdrawn listings) |
| Sessions / password reset | Until expiry | Delete after use or expiry |
| Display / ad logs | 6 months | As required by law |
| Cooling-off / contract records | 5 years | As required by law |
| Payment / supply records | 5 years | As required by law |
| Consumer complaints | 3 years | As required by law |
4-1. Seller inactivity
If a seller account is unused for about one year (no login, listing, or billing settings activity), we email a notice about 30 days before purge. Using the service again extends retention. If still inactive, we purge account PII (name, email, password, Lemon secrets, legacy bank fields). We do not collect phone numbers for this notice.
Buyers have no separate account; checkout emails follow the order retention rules above.
5. Sharing
We do not sell personal data. We share only with consent, processors below, or lawful authority requests. When a buyer messages a seller, the reply-to email is passed to that seller.
6. Processors
| Processor | Work |
|---|---|
| Lemon Squeezy | Seller subscription billing; seller-hosted product checkout (buyer pays seller) |
| Cloudflare (Workers / R2) | Hosting and private file / metadata storage |
| Resend | Download, inquiry, password-reset, and inactivity emails |
We supervise processors as required by applicable law.
7. International transfers
Infrastructure may process data or files outside Korea. We apply required safeguards and disclose destination details when required.
8. Your rights
You may request access, correction, deletion, restriction, withdrawal of consent, or seller account closure.
- Sellers: Billing → Delete account. Inactivity emails can also extend retention via login.
- Everyone: contact@filvendo.com
We act without undue delay as law requires. Legally mandated records may be restricted until the retention period ends.
9. Cookies and sessions
We use HttpOnly cookie sessions for seller login and security. Blocking cookies may disable sign-in.
10. Deletion
When retention ends or the purpose is achieved, we delete data promptly (secure erase for electronic files; shred/incinerate for paper). Admins periodically run expiry / inactivity cleanup tools.
11. Security measures
- Password hashing (PBKDF2)
- AES-GCM encryption for sensitive fields; email lookup via HMAC
- HTTPS in transit; role-based sessions
- Rate limits on auth endpoints
- Optional admin second factor
- Minimal collection and access control
- Masked emails in admin UI and logs
- Private R2 bucket with signed URLs only
- Monitoring for abuse and anomalies
12. Privacy contact
- Operator: GT
- Representative: Yulsang Seo
- Email: contact@filvendo.com
- Phone: +82 10-9830-8899
- Address: 37 Cheongoknam-ro, Buk-gu, Ulsan, Korea (GT office)
13. Notice of changes
Material changes to this policy are posted on the service or this page with an effective date.
Related
Other pages in the same policy set.