Privacy policy

Privacy policy

[!NOTE] Summary, in plain words

• We collect what we need to run your account, sell and deliver licenses, bill you, prevent abuse and help you when you ask for support or a quote.
• We don't sell your personal information or share it for anyone else's purposes. The only companies that receive it are the service providers that run parts of the store for us, listed below.
• The only non-essential uses are ad measurement and analytics: learning how our site is used and which of our ads bring customers, so we spend our ad budget well.
• Ad measurement only links your visit to a purchase with your consent, which you give or refuse in our cookie banner.
• You can ask to see, correct or delete your information.

1. Who we are

Sonam's Esthetic Touch runs the Sonam's Esthetic Touch store at https://store.sonamesthetictouch.com/ and is responsible for the personal information described here. To reach us about privacy, use our contact form.

2. What we collect and why

An account with the store. If you create an account with the store itself, we keep your email address, your name if you give it, your password (only as a one-way hash, never the password itself), whether you've confirmed your email, and — if you add them — your authenticator app's secret (encrypted), your security keys' public keys, and one-way hashes of your recovery codes. We send you emails to confirm your address, to reset your password and when your account's security settings change. We record sign-ins and failed attempts (with the IP address and browser) to protect your account.

Purchases and billing. We keep a record of what you buy: product, plan, price, discount codes, tax, payment and refund status, and the payment provider's references. Card and other payment details are entered on Stripe's pages and never reach our servers. If you choose to save a payment method, Stripe stores it. Your billing address is collected by Stripe where it's needed to calculate tax.

Licenses and license checks. When the software checks its license with us, it sends the license token and may send an installation or device identifier, a computer name (hostname), and the software's version or user agent. We also see the IP address it connects from. We use this to enforce seat limits and license terms, and to detect sharing and abuse:

• activation records store the device identifier only as a hash, plus the computer name and the network it connected from, shortened to its range (for example, 203.0.113.0/24);
• free trials: we record that you (or your organization) started a trial of a product, so each person and organization gets one trial per product. If a product allows only one trial per computer, we also keep a hash of the installation identifier for that purpose;
• while a seat is in use, the full IP address, computer name and user agent are kept with that seat session, which expires shortly after the software stops checking in.

Declarations you make. If you declare your organization's size or confirm a personal-use plan, we keep what you declared, the wording you agreed to and when. For size declarations, we also keep the IP address and browser user agent. This is our record that the price or plan you chose was right for you.

Support requests. What you write, files and diagnostics you attach, and the product, license, version and platform details you give us. In an organization, the organization's administrators can see its support requests.

Service requests. When you ask for a service through its scoping form: your answers (for example the scope of the work, your preferred dates and anything you write), your billing country, and the estimate shown to you. Answers you save before submitting are kept as a draft. In an organization, members who can make purchases for it can see its service requests.

Engagements and hardware orders. After you accept a quote: the dates proposed and agreed, the messages you and our team exchange about the work, the files we deliver to you (such as reports), shipping details for hardware (carrier and tracking number), and the invoice for the balance, which Stripe handles like any other payment.

Service contracts. When your service contract includes access to one of our apps: the contract's dates, the app and plan, and the contact address we send the access details to.

Quotes. The quotes we send you for a service, whether you accepted or declined them (with the exact acceptance statement, who accepted and when, and any reason you give for declining), and the payment of the amount due, which is handled like any other purchase.

Sales inquiries. If you contact our sales team (you don't need an account), we keep what you enter in the form: your name, work email address and company, the optional job title, phone number and country, your organization's size or expected number of users, the product and plan you're asking about, your message, how you'd like to be contacted, and your agreement to be contacted about the inquiry. We also keep the IP address and browser user agent it was sent from (to stop abuse), whether you were signed in (and, if so, your account and organization), and, where ad measurement is allowed, the ad campaign that brought you to us. We use it only to respond to your inquiry. If you aren't signed in, we don't send you any automatic email; our team replies to you directly.

Reviews. Your rating and review. Reviews are public under the name you choose (by default "Verified customer"). We keep a record of the display-name choice you agreed to.

Messages and preferences. The emails we send you (receipts, license expiry notices, support replies), your notification preferences, and the license contacts an organization adds (people added by email address only get notices after they confirm).

Receipt contacts. You (or, for an organization, the people who buy for it) can add up to five email addresses, such as an accounts-payable mailbox, to receive a copy of every receipt and refund notice. We store each address, who added it and when, whether it has confirmed, and a record of which copies were sent to it. An added address receives nothing until it confirms a link we email to it, and every copy has a link to unsubscribe; we remember an unsubscribe so the address isn't asked again. The copies show what was bought, the amounts and payment references, and who they were sent for.

AI features. Some features use AI: the product assistant, answers drawn from our documentation, the automatic checking (moderation) of reviews before they're published, and a check of service requests for completeness — which may ask you up to three follow-up questions before you send the request — and again before our team prepares a quote. When you use one of these features, the text you submit (your question, your review, or your service request answers, with any answers to follow-up questions) is sent to the AI inference provider we use to process it and produce the result. By using an AI feature, you agree to that sharing. If you'd rather not, don't use the assistant, and contact us instead of leaving a review. We don't store assistant questions or answers, only counts.

Security records. We log account and administrative actions (with IP address and browser user agent) to keep the service secure and to investigate abuse.

Ad measurement and analytics. See section 3.

3. Ad measurement and analytics: the only non-essential uses

We advertise the store, and we want to know how our site is used and which ads actually bring customers, so we don't waste money on ads that don't work. That's the only information about you that we collect or share beyond what your service needs.

Ad measurement

• A link from one of our ads can carry campaign tags (UTM parameters) and an ad platform's click identifier (for example Google's gclid, Meta's fbclid, Reddit's rdt\_cid or Microsoft's msclkid).
• We ask for your consent in a cookie banner. Until you accept, we only count the campaign anonymously: no cookie, no click identifier, nothing linked to you. If you accept, we set a first-party cookie, le\_vid, holding a random identifier for up to 400 days, so we can connect your ad visit to a later purchase. Your choice is remembered in the le\_consent cookie for 180 days. You can change it at any time with "Cookie preferences" in the footer. Declining deletes the le\_vid cookie. We note the time you accepted or declined, against that random identifier.
• When a purchase is linked to an ad click, we may report the purchase to the ad platform (Google Ads, Meta or Reddit). The report contains the click identifier, the purchase value and currency, our order reference and the time, plus a SHA-256 hash of your email address and, for Meta and Reddit, a hash of our customer identifier. For Meta and Reddit it also contains your browser's IP address and user agent at the time of the purchase, which they use to match the purchase to the ad click. We keep that IP address and user agent with the order only for this report. The platforms use the hashes only for matching. We never send your email address in readable form, and we only send purchases where measurement was allowed for you. Reddit only receives purchases that came from a Reddit ad.
• The store doesn't load any ad-platform or third-party analytics scripts in your browser, and we don't build advertising profiles.

4. Who we share it with

We don't sell your personal information, and we don't share it with anyone for their own purposes. Much of the store runs on systems we operate ourselves:

• Email is sent through our own mail relay. Your messages are processed on our systems, not by an outside email service.

Your information reaches other companies only when they run part of the store for us (service providers acting on our instructions), as follows:

Some features are optional and may be switched off. A provider receives nothing while the feature that uses it is off.

We may also disclose information when the law requires it, or to protect our rights or someone's safety. If our business is sold or merged, your information may pass to the new owner, and this policy will keep applying to it.

5. Cookies and browser storage

• Sign-in session cookie: keeps you signed in. Needed for the portal to work.
• le\_mfa: for a few minutes between your password and your second step (an authenticator code or security key) when you sign in.
• le\_consent: remembers your ad-measurement and analytics choice (180 days).
• le\_vid: ad measurement, only when allowed (up to 400 days; see section 3).
• Browser storage: your light/dark theme choice, and short-lived information in the current tab (for example, the page to return to after sign-in, or campaign tags waiting for your consent decision).
• A bot-protection check may set its provider's own cookies when it runs.

6. How long we keep it

• Account information: while your account exists.{{#if direct_sign_in}} If you delete your account with the store, it's deleted 7 days later (you can cancel by signing in before then).{{/if}}
• Purchase, invoice and refund records: as long as tax and accounting laws require. If you ask us to delete your data, we remove your name and contact details from them and keep only the financial details.
• License checks: activation records while the license exists. Seat session data expires shortly after the software stops checking in.
• Support requests: until they're deleted. Attachments may be deleted automatically some time after a request is closed.
• Service requests: until they're deleted; a saved draft until you submit it or it's deleted.
• Quotes: until they're deleted; paid quotes are kept with your purchase records.
• Engagements and hardware orders (with their messages and delivered files): until they're deleted. If you delete your account, your personal ones are deleted; an organization's are kept for the organization without your name or email.
• Service contracts: until they're deleted; with your account (personal ones) or your organization.
• Sales inquiries: for the retention period we set (by default 24 months), then deleted automatically. Inquiries we mark as spam are deleted sooner.
• Receipt contacts: until they're removed or unsubscribe (we keep the unsubscribe so it stays respected), and deleted with your or your organization's other data on a deletion request.
• Ad measurement records: while we use them to measure our campaigns, and deleted with your other data when you ask for deletion.
• Security logs: as long as we need them to keep the store secure and to investigate abuse.

7. Your rights

Depending on where you live, you may have the right to see the personal information we hold about you, to correct it, to delete it, to get a copy, and to object to or restrict how we use it, including ad measurement and analytics.

• To see, correct or get a copy: contact us.{{#if verisil_sign_in}} If you sign in through our sign-in service, your name and email come from that account, so change them there.{{/if}}
• To delete: contact us{{#if verisil_sign_in}}, or delete the account you sign in with at our identity provider, which passes deletion requests on to us{{/if}}.{{#if direct_sign_in}} With an account of the store itself, you can also delete it yourself under Account → Security.{{/if}} When we act on a deletion request, we erase your personal information, delete your reviews, support requests, service requests (and drafts) and sales inquiries (including ones sent with your email address while signed out), revoke the licenses you own, delete your receipt contacts (and your address wherever someone added it as one), and remove your identity (and any Google Analytics identifier kept with them) from purchase records, keeping only what accounting law requires.
• To stop ad measurement and analytics: decline in the cookie banner or "Cookie preferences", or ask us.

You can also complain to your local data protection authority.

8. Security

Connections to the store are encrypted. Card details are handled by Stripe. License signing keys and service credentials are stored encrypted{{#if store_accounts}}, passwords only as one-way hashes{{/if}}, and access to customer data is limited to the people who need it to run the store.

9. International transfers

We and our service providers may process your information in countries other than yours. Where the law requires it, we use appropriate safeguards (such as standard contractual clauses) for those transfers.

10. Children

The store isn't meant for children, and we don't knowingly collect information from anyone under 16 (or the minimum age of digital consent where you live). If you believe a child has given us personal information, contact us and we'll delete it.

11. Changes to this policy

We'll publish any changes here with a new effective date. If the changes are significant, we'll take reasonable steps to let you know.

12. Contact

Contact us with any privacy question or request.

Sonam's Esthetic Touch 15 Evansfield Rd NW, Calgary, AB T3P 0L1, Canada