Privacy Policy
Effective 2026-08-03 · DRAFT for P55 Hub payments — human legal review required before production use.
1. Who we are
Birkly Marketplace (“we”, “the platform”) operates marketplace.birkly.io for browsing, purchasing, entitlement activation, and licensing extensions for Birkly CMS.
2. Data we collect
- Account data — email and password hash for buyer or provider accounts.
- Purchase data — order id, offer slug, amount, pricing model, subscription status, refund status, and related receipt metadata.
- Entitlement data — entitlement ids, fallback activation keys, plan capabilities, trial end dates, installation ids, activation environment (production or staging), activation status, and signed-token metadata.
- Payment data — processed by Stripe and Stripe Connect; we do not store full card numbers.
- Technical data — IP address, browser type, and request logs for security and abuse prevention.
- Provider data — provider profile, seller status, country, Stripe Connect identity and payout details for sellers.
3. How we use data
- Fulfill purchases and issue, refresh, hold, or revoke entitlements and fallback activation keys.
- Operate provider payouts and Birkly application fees via Stripe Connect.
- Send transactional email (receipts, activation keys, trial/subscription notices, refund status).
- Moderate listings, reviews, and quality control per our Marketplace policy.
- Comply with legal obligations and respond to abuse reports.
4. Sharing
We share purchase, entitlement, and support-related data with the provider of a third-party offer when you buy or activate their extension, because that provider is the seller and merchant of record for third-party offers. Payment data is shared with Stripe under their privacy policy. We do not sell personal data.
5. Retention
Order, entitlement, activation, refund, chargeback, and provider records are retained for accounting, dispute resolution, seat enforcement, and audit. Review moderation uses soft-hide (records preserved). You may request account deletion subject to legal retention requirements.
6. Security
We use HTTPS, access controls on admin surfaces, and checksum-verified artifacts. No system is perfectly secure; report concerns to platform support.
7. Your rights
Depending on your jurisdiction you may have rights to access, correct, or delete personal data. Contact us through the support channel published on the marketplace site.
8. Cookies
Session cookies authenticate buyer and provider logins. We do not use third-party advertising cookies on the marketplace storefront.
9. Changes
We may update this policy. The effective date at the top of this page will change when we do.
Related: Terms of service · Refund policy