Draft, not reviewed by a lawyer
Last updated 19 October 2026
This page says what BigQuiv Digitals stores when you buy TheEditCompanion, who handles it, and how to ask for it to be deleted.
What we store when you buy TheEditCompanion
When you place an order, we store:
- Your name and your email address
- The payment method, the order reference and the payment provider's reference, and the order status (for example awaiting payment, paid)
- The amount, the currency, which price you paid, and the amount we received
- A record that you ticked both boxes, with the time and the version of the wording
- A one-way hash of your IP address (not the address itself), stored with the consent record
- The source tag from the link you came from, if there was one (for example ig-bio)
- The dates of payment and of support (30 days after payment)
- Whether your delivery email was sent, how many tries it took, and the error text if it failed
- A hash of your order cookie, so we can tell the order is yours (the cookie value itself is not stored)
- Download links as hashes only (the link itself is not stored), with their expiry and how many downloads were used
- Each time a download link was used: the time, a one-way hash of your IP address, and the first 200 characters of your browser's user-agent text (it names your browser and system)
- An event log for the order: for example order created, paid, email sent, link issued, resend, download, and when an admin exported the order list. If we ever switch on bank transfer, the log can also hold the sender name and note you give us
What we store when you start a checkout, even if you do not pay
Each time you send the checkout form with a valid email address, a name and both boxes ticked, we store your email address and the hour of the attempt, even if you never finish paying. We use it only to limit repeated attempts to 5 per email address per hour, which stops abuse. Records older than 24 hours are deleted automatically the next time anyone starts a checkout.
Sign-in link for My purchases
If you ask for a sign-in link on My purchases, we use your email only to send you that link. The link expires after 30 minutes.
What we do not store
We do not store your card number or bank login. Flutterwave handles those on its own payment page.
We do not add you to a marketing list. If we ever offer one, it will be a separate box, unticked.
Why
To take your payment, deliver your download, send your receipt and link, give you install support for 30 days, keep accounting records, and stop abuse.
Who processes it for us
We use these services to run the sale:
- Flutterwave, to take payment. It receives your name, your email and the amount
- Neon, which hosts the order database
- Resend, to send your download email. It receives your name, your email and the message
- Vercel, which hosts the website, keeps request logs (these include IP addresses and the page paths requested), and holds the download file in its file storage
- Telegram and email, for a short order alert to the owner. The alert can include your name, your email and the order reference
Cookies
When you start an order, the site sets two first-party cookies. Both are httpOnly, which means scripts on the page cannot read them:
- tec_claim: a random value that proves the order is yours. It lasts 14 days
- tec_dl: set on the order page after payment. It holds your page download link. It lasts 24 hours
Browser storage
If you arrive through a link with a source tag (for example ?src=ig-bio), the product page keeps that tag in your browser's session storage under the name tec_src, so it is still attached if you browse and come back to the form. It stays in your browser, is sent to us only with your order, and is cleared when you close the tab.
How long we keep it
We do not delete order records automatically. We keep them until we delete them or you ask us to delete them, and we keep payment records for as long as accounting rules require. Download events and the order event log are kept with the order. Checkout attempt records (your email and the hour) are deleted automatically after 24 hours, as described above.
Ask us to delete your data
Email contact@bigquivdigitals.com from the address you used to buy, and say what you want deleted. We will delete what we are allowed to delete. We may have to keep payment records for accounting.