Privacy, in plain language.

Information we receive

Depending on what you do, we may receive your email address, content lane or starting preference, consent choices, and the information you include in a support or correction message. For a purchase, we receive order and entitlement details such as the product, amount, currency, payment status, Stripe customer or session identifiers, and the email used for delivery. Stripe handles payment-card details through its hosted checkout; Gromby LLC does not store your full card number.

The site and its hosting or security services may also create ordinary technical records such as an IP address, browser or device information, request time, page path, and error details. Convex receives limited funnel or delivery events so we can operate the site and confirm access. We do not sell or rent personal information.

Why we use it

We use information to deliver purchased materials, maintain entitlements, process refunds and cancellations, send transactional messages, answer support requests, record consent and unsubscribe choices, prevent abuse and fraud, secure the service, measure basic funnel operations, and meet accounting or legal obligations. Marketing or editorial email is sent only where you have opted in; you can unsubscribe from those messages at any time. Transactional messages needed to fulfill an order or membership can still be sent after marketing opt-out.

Service providers

Gromby LLC uses service providers to run the operating path: Stripe processes hosted checkout and payment events; Mailgun delivers transactional purchase and access email; and Convex stores application records such as leads, consent, orders, entitlements, delivery jobs, and operational events. Providers process information under their own terms and privacy practices while providing services to Gromby LLC. They may process data in the locations where they or their infrastructure operate.

Retention and deletion

We retain each category only as long as it is reasonably needed for its purpose: active access and delivery, support and corrections, refunds or chargebacks, fraud and security review, consent history, accounting, or legal obligations. When a record is no longer needed, we delete it or remove identifying details where practical. Backups and provider logs may persist for a limited operational period before normal rotation. Some order, payment, consent, and fraud records cannot be deleted immediately when a legal or dispute obligation requires them to be kept.

Your choices

You can ask us to access, correct, delete, or stop marketing use of information associated with your email. Send the request to support and include the address or order reference needed to find it; do not attach a full identity document or other private records. We may need to verify that you control the request and may retain information required for delivery, accounting, security, or legal compliance. You can also use the unsubscribe link in a marketing email.

Sensitive information and age

Do not submit passwords, API keys, bank or card numbers, health or therapy information, precise location data, identity documents, or another person's private information. If you accidentally send something sensitive, contact support so we can limit and remove it where possible. The service is intended for adults and is not directed to children under 18.

Privacy questions