Privacy Policy

Last updated: 13 October 2026

Who is responsible

The data controller is OUROVOROS SINGLE MEMBER P.C., Perikleous Kavda 24, 55236 Panorama, Greece, trading as GDA (Georgios Delkos Audio) (“GDA”, “we”). Contact for privacy requests: support@gda-audio.com.

What we collect

When you buy, we receive:

• your email address, to send your download link and receipt;
• your country, to charge the correct VAT;
• the order record: what you bought, the price, the date, and the Stripe payment reference.

Card details are entered on Stripe’s page. We never see or store them.

What we do not collect

• This site runs no analytics and no tracking cookies.
• The plugins do not connect to the internet, do not phone home, and send no telemetry.
• There are no license keys or accounts.

Why we use your data (legal basis)

• To deliver what you bought and to handle support requests and claims about faulty downloads: performance of a contract (GDPR Art. 6(1)(b)).
• To keep tax and accounting records: legal obligation (Art. 6(1)(c)).
• To prevent fraud and abuse, such as rate limiting checkout requests by IP address: legitimate interest (Art. 6(1)(f)).

We do not send marketing email unless you ask for it, and we never sell your data.

Who processes data for us

• Stripe — payment processing, tax calculation, and receipts.
• Cloudflare — hosting of this site, download storage, and delivery.
• Resend — sending order emails.
• Neon — hosting of the order database (Postgres).

Some of these providers may process data outside the EU. Where they do, they rely on safeguards such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

How long we keep it

• Order records: as long as tax and accounting law requires, then deleted.
• Download links stop working after 72 hours.
• Rate-limit entries keyed by IP address are deleted automatically after a short time.
• Support emails: as long as needed to resolve your request, up to 1 year.

Your rights

Under the GDPR you can ask to access, correct, delete, or export your data, and you can object to or restrict how we use it. Some order data must be kept for tax reasons even if you ask us to delete it. Email support@gda-audio.com and we will reply within one month.

You can also complain to your data protection authority. Our supervisory authority is the Hellenic Data Protection Authority (dpa.gr).

Changes

If we change this policy, we will update the date at the top.