Privacy Policy

Last updated: October 9, 2026

This policy explains how BosonIT LLC (“BosonIT”, “we”, “us”) handles personal information when you visit budget.bosonit.org or buy a digital product here. Questions or requests: kacj77@gmail.com.

What we collect

• Order details you give at checkout: name, email address, billing address fields shown at checkout (used for receipts, tax calculation and fraud prevention), and the products you buy.
• Payment information: card and wallet details are entered into Stripe’s secure fields and processed by Stripe. We never see or store your full card number. We receive limited payment details from Stripe (for example card brand, last four digits, payment status).
• Download records: when you download a purchased file we record the time, the download count and the IP address, to enforce download limits and prevent abuse.
• Technical data: our web server keeps standard access logs (IP address, browser user agent, page requested, time, referring page) for security and to measure site performance and traffic.
• Order attribution: WooCommerce order attribution records how you reached the store (for example the referring site, campaign tags, device type and number of pages viewed in the session) and stores it with your order.

Cookies and similar technologies

• Store cookies (woocommerce_cart_hash, woocommerce_items_in_cart, wp_woocommerce_session_*): keep your cart working. Session or up to 2 days.
• Order attribution cookies (sbjs_*): first-party cookies that remember the traffic source of your visit so it can be attached to an order. Session cookies plus source cookies that last up to 6 months. They are not shared with advertisers.
• Stripe cookies (for example __stripe_mid, __stripe_sid): set by Stripe on checkout pages for fraud prevention. Up to 1 year. See Stripe’s privacy policy.

Analytics: we measure store performance with WooCommerce Analytics, which is calculated on our own server from order records, and with our own server logs. We do not use advertising pixels, and we do not use third-party analytics cookies. If we add a privacy-friendly analytics service in future (for example cookieless Cloudflare Web Analytics), we will list it here.

How we use it

• To process payment, deliver your download and send your receipt and order emails.
• To provide support, replacements and refunds.
• To calculate and remit sales tax and keep accounting records.
• To prevent fraud and keep the site secure.
• To understand, in aggregate, which pages and sources lead to purchases so we can improve the store.

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising. We do not send marketing email unless you separately opt in.

Service providers

• Stripe, Inc.: payment processing and fraud prevention (stripe.com/privacy).
• Mailgun (Sinch): delivers order and receipt emails (mailgun.com privacy policy).
• Hosting provider: our virtual server, located in the United States, stores the site and order database.
• Internal automation: order events are passed to an automation tool (n8n) that runs on our own server, for record-keeping. It does not send your data to third parties.

We may also disclose information when required by law or to protect our rights, for example in a payment dispute.

How long we keep it

• Order, payment and tax records: as long as tax and accounting law requires, generally up to 7 years.
• Download records: kept with the order.
• Server access logs: rotated and deleted after about two weeks.
• Support emails: until the request is resolved, and then up to 2 years.

Your choices and rights

You can ask us to tell you what personal information we hold about you, to correct it, to give you a copy, or to delete it (we keep records we are legally required to retain). Depending on where you live (for example California, Colorado, Virginia, the EU or the UK), you may have additional rights, including the right to object to or restrict processing and to complain to a regulator. Email kacj77@gmail.com and we will respond within 30 days. We will not discriminate against you for exercising your rights. You can block or delete cookies in your browser, but the cart and checkout may not work without them.

Security and children

The site uses HTTPS, and payment data is handled by Stripe. No method is perfectly secure, but we limit access to order data to people and systems that need it. This store is not directed to children under 13, and we do not knowingly collect their information.

Changes

If we change this policy, we will post the new version here with a new “last updated” date.