1. The short version
We collect only the information needed to sell, deliver, support, and improve our software. We do not sell your personal information. We do not use purchase information to add you to marketing email without your separate consent.
2. Information we collect
When you ask for updates
We collect your email address, the page or product you expressed interest in, consent and confirmation timestamps, and unsubscribe status.
When you contact support
We collect your email address, message, selected product and topic, and any app-version or operating-system details you choose to provide.
When you purchase or verify ownership
Our checkout provider collects payment and billing information. We retain a narrow purchase record such as your verified email, product, purchase status, provider identifiers, and relevant refund or revocation timestamps. We do not store full payment-card details.
Technical and anti-abuse data
Our hosting and anti-abuse services may process IP addresses, request headers, timestamps, and challenge results. We use this information to operate the site, prevent abuse, and diagnose failures.
3. How we use information
- Deliver purchase confirmations, sign-in codes, updates, and support replies.
- Verify that a person owns a product and restore access on personal devices.
- Process refunds, disputes, fraud checks, and legally required records.
- Protect forms, infrastructure, customers, and the studio from misuse.
- Send optional product updates only after double opt-in.
4. Service providers
We use a small set of providers to operate Buyonce.ai:
- Stripe for managed checkout, payment, tax, invoice, refund, and transaction support.
- Supabase for passwordless identity, narrow ownership records, email consent records, and release storage.
- Resend for confirmation, authentication, support, and optional update emails.
- Vercel for website hosting, request delivery, and operational logs.
- OpenAI for eligible Writerbox AI features when you separately sign in to ChatGPT or Codex.
These providers process information under their own terms and privacy policies. They may process data in countries other than the one where you live.
5. Email choices
Product-update email requires a confirmation link. You can unsubscribe through the link in an email or contact us. Transactional messages needed to deliver a purchase, verify access, or answer support are separate from marketing consent.
6. Retention and deletion
We keep confirmed update subscriptions until you unsubscribe or ask us to delete them. Support messages are kept only as long as reasonably useful for support and safety. Purchase, refund, tax, fraud, and dispute records may be retained as required for legal and financial obligations. Anti-abuse and operational logs are retained for limited periods set by us or our providers.
You may ask to access, correct, export, or delete personal information. Some records may need to remain where law, fraud prevention, or financial obligations require it.
7. Local files and AI accounts
Writerbox is designed to keep your writing on your device. Your Buyonce ownership identity and your ChatGPT or Codex identity are separate. When you choose to use an AI feature, the relevant content and request are handled according to the connected service and the choices presented in Writerbox.
8. Security, children, and changes
We use reasonable technical and organizational safeguards, but no system can guarantee absolute security. Buyonce.ai is not directed to children under 13, and we do not knowingly collect their personal information. We may update this policy as the products or providers change; the date at the top shows the latest revision.
9. Contact
Questions or privacy requests can be sent to support@buyonce.ai.