What is collected
Only the information required to operate accounts, receipts, access delivery, support and security.
Legal / Privacy
Privacy information written for the person whose data it is.
payMFER limits what each part of the product can see. A storefront, a receipt, and a support request do not need the same information.
Why it is used
Identity links a buyer to a purchase and allows the system to deliver and support the paid access.
How long it is kept
The final policy must say how long each kind of information is kept and why.
Your controls
Buyers can request export or deletion through the account privacy route, subject to legal record requirements.
Plain language is part of privacy.
The final legal text must be reviewed against the production data map before launch.