Plotwist Studio

Legal

Privacy Policy

1. Who is responsible

Hadar Plotkin (הדר פלוטקין), trading as Plotwist Studio, a VAT-registered business in Israel, of Alumim, Ramat Gan, Israel, is responsible for your personal data. Contact: support@plotwiststudio.com.

2. What we collect

  • Order details: email address, name if you provide it, billing country, products bought, amounts and tax documents.
  • Delivery details: license keys, plus records of downloads including time and IP address.
  • Messages you send us through the contact form or by email.
  • Newsletter details, if you subscribe: email address, plus the date and source of your consent.
  • Technical details: IP address, browser information and server logs. We use your IP address to estimate your country, which sets the first language and currency you see.

3. What we don't collect

Your card details are entered on Cardcom's hosted payment page. We do not receive or store your full card number.

4. Why we use it

  • To process orders, deliver products and license keys, and provide support (to perform our contract with you).
  • To issue tax documents and keep accounting records (legal obligation).
  • To prevent fraud and keep the website secure (legitimate interests).
  • To send the newsletter (your consent, which you can withdraw at any time).

5. Newsletter

We only send marketing emails if you opt in and then confirm by pressing the button in the email we send you. The box at checkout is never ticked in advance. Every marketing email has an unsubscribe link.

6. Cookies

We use essential cookies: se_locale and se_currency remember your language and currency for up to one year, and your browser stores your cart on your own device. We don't currently use advertising cookies. YouTube videos on product pages only load after you press play, and YouTube's own privacy terms then apply. [Update this section if analytics or marketing tools are added.]

7. Who we share it with

We share data only with service providers that help us run the store, and with authorities where the law requires: Cardcom (payments and tax documents), Vercel (hosting), Neon (database), Cloudflare (file storage) and Resend (email and newsletter). Some of them process data outside Israel. [Lawyer to confirm the transfer safeguards.] We don't sell personal data.

8. How long we keep it

We keep order and tax records for as long as tax law requires [accountant to confirm the period]. We keep newsletter data until you unsubscribe, plus a minimal record of the opt-out. Sign-ups that are never confirmed are deleted after 30 days. We keep logs for [period].

9. Your rights

You can ask to see or correct your data under Israel's Privacy Protection Law, 1981. If the GDPR or a similar law applies to you, you may also have rights to delete, restrict, object to or transfer your data, and to complain to your supervisory authority. Contact support@plotwiststudio.com. We may need to keep records that the law requires.

10. Security and children

We use reasonable measures to protect your data, including encrypted connections and expiring download links, but no system is perfectly secure. The store is not aimed at children under [16].

11. Changes

We'll publish any updates to this policy on this page.