Privacy Policy

1. Introduction

The Golden Crust Co. ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website thegoldencrustco.com and our digital products.

2. Information We Collect

We collect the following types of information:

• Information you provide directly: Email address (when signing up for free resources or purchasing), name (if provided), and account credentials.
• Payment information: Payments are processed by Paddle (our Merchant of Record). We do not directly store your credit card information.
• Usage data: We use Google Analytics to collect anonymized information about how you interact with our site (pages visited, duration, device used).
• Cookies: We use essential cookies for site functionality and analytics cookies to improve your experience.

3. How We Use Your Information

We use your information to:

• Deliver your purchased digital products (eBook, Sovereign Vault access).
• Send transactional emails (purchase confirmation, access credentials).
• Send marketing emails (nurture sequence) — only if you opted in through our free resources.
• Improve our website and products.
• Respond to your support requests.

4. Data Sharing

We never sell your personal data. We only share your information with:

• Paddle: Our official Merchant of Record for payment processing.
• Google Analytics: For anonymized web traffic analysis.
• Hosting providers: For secure storage of your data.

5. Data Security

We implement appropriate security measures to protect your personal data, including password encryption, secure HTTPS connections, and secure cloud file storage. However, no method of transmission over the Internet is 100% secure.

6. Your Rights

Under GDPR and applicable laws, you have the right to:

• Access your personal data.
• Rectify inaccurate information.
• Request deletion of your data.
• Object to the processing of your data.
• Withdraw your consent at any time.
• Unsubscribe from our marketing emails at any time.

To exercise these rights, contact us at [email protected].

7. Data Retention, Subscription Cancellation & Document Access

We retain your personal data for as long as necessary to provide our services and meet our legal obligations. Customer account data is kept as long as your account is active.

Subscription cancellation. If you cancel your subscription, your full access is not cut off immediately — you keep full access until the end of the billing period you have already paid for. We never terminate a period you have already paid for early.

30-day read-only retrieval window. After your paid period ends, you have a 30-day read-only window. During this time you can log in, view, and download your existing documents from your Vault, each document individually. During this window you cannot upload new documents or run new AI audits.

After the 30-day window. Once this window elapses, access to the Vault and paid features is blocked. Your stored documents then become eligible for deletion or anonymization in line with our retention policy. We recommend downloading any documents you wish to keep before this window ends.

Legal obligations. Certain data — such as payment, billing, tax, and fraud-prevention records — may be retained for longer where required by law, regardless of account deletion.

You may request account deletion or earlier erasure at any time by writing to [email protected]. We will process your request within a reasonable timeframe, subject to the legal retention obligations above. After deletion, residual copies may persist in our secure backups for a limited period until they are overwritten as part of our routine backup cycles.

8. Changes

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised update date.

9. Contact

For any questions about this Privacy Policy, contact us at [email protected].