Privacy Policy

1. Introduction

This Privacy Policy describes how indiegoon (“Company,” “we,” “us,” or “our”) collects, uses, and discloses personal information in connection with our website at indiegoon.dev (the “Site”), our command-line interface tools (the “CLI”), and the sale and licensing of the indiegoon SaaS boilerplate source code (collectively, the “Service”).

By purchasing a license or otherwise using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, do not use the Service.

2. What We Sell

indiegoon sells a digital product: proprietary source code (a SaaS boilerplate) distributed under a per-seat license. The product is delivered electronically via a license key that grants access to download and use the source code. We do not operate a hosted SaaS application on your behalf; rather, you deploy and operate the code yourself on your own infrastructure.

3. Personal Information We Collect

3.1 Information You Provide Directly

• Email address: provided at checkout or newsletter signup.
• Billing name and address: collected by our payment processor during checkout.
• Support correspondence: any information you provide when contacting us at hi@indiegoon.dev.

3.2 Information Collected Automatically

• License activation metadata: when you activate a license key via the CLI, a hashed machine identifier is sent to DodoPayments to enforce per-seat activation limits. We do not receive or store hardware serial numbers, IP addresses, or browsing history from the CLI.
• Server logs: our hosting provider (Railway) automatically collects standard HTTP request logs (IP address, user agent, timestamp) for operational and security purposes. These logs are retained for a maximum of 7 days.

3.3 Information We Do NOT Collect

• We do not collect, store, or have access to your payment card numbers, bank account details, or other financial instrument data. All payment processing is handled entirely by DodoPayments.
• We do not use third-party analytics, advertising trackers, or behavioral profiling tools on our Site.
• We do not collect telemetry from the boilerplate source code you deploy.

4. How We Use Your Information

We use the personal information we collect solely for the following purposes:

• License fulfillment: To deliver your license key, verify activation eligibility, and enforce the activation limits of your purchased tier (Starter: 2 machines, Pro: 3 machines, Bundle: 5 machines).
• Transactional communications: To send purchase confirmations, license key delivery, and critical product security notices.
• Newsletter: To send product updates and announcements if you have explicitly opted in. You may unsubscribe at any time via the link in each email.
• Customer support: To respond to inquiries and resolve issues.
• Fraud prevention: To detect and prevent unauthorized license use or payment fraud.

5. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, our legal bases for processing are:

• Performance of a contract: Processing necessary to deliver the license you purchased.
• Legitimate interest: Fraud prevention, security, and enforcement of license terms.
• Consent: Newsletter communications (which you may withdraw at any time).

6. Third-Party Data Processors

We share personal information only with the following service providers, each acting as a data processor on our behalf:

We do not sell, rent, or trade your personal information to any third party for marketing or advertising purposes.

7. Cookies and Tracking Technologies

The Site does not use cookies for analytics or advertising. We may use strictly necessary cookies for session management (e.g., CSRF protection) that cannot be used to identify or track you across websites. No third-party tracking pixels, fingerprinting scripts, or advertising beacons are present on the Site.

8. Data Retention

• Purchase and license records: Retained indefinitely for the duration of your license validity and to comply with tax and accounting obligations.
• Newsletter subscriptions: Retained until you unsubscribe. Upon unsubscription, your email is removed within 30 days.
• Server logs: Automatically purged after 7 days by our hosting provider.
• Support correspondence: Retained for 2 years after resolution for quality assurance.

9. International Data Transfers

Our service providers may process data outside of your country of residence. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or the provider's participation in recognized data protection frameworks).

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete personal data.
• Erase your personal data (subject to our legal retention obligations).
• Restrict or object to processing.
• Data portability (receive your data in a structured, machine-readable format).
• Withdraw consent for newsletter communications at any time.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at hi@indiegoon.dev. We will respond within 30 days.

11. Security Measures

We implement industry-standard security measures including: TLS encryption for all data in transit, encrypted database storage at rest, access controls limited to essential personnel, and webhook signature verification (HMAC SHA-256) for all payment events. However, no system is perfectly secure, and we cannot guarantee absolute security of your data.

12. Children's Privacy

The Service is not directed at individuals under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will promptly delete that information.

13. Changes to This Policy

We may revise this Privacy Policy at any time. If we make material changes, we will update the Effective Date above and, where required by law, notify you via email. Your continued use of the Service after such changes constitutes acceptance of the revised policy.

14. Contact

For privacy-related inquiries, data requests, or complaints: hi@indiegoon.dev