Privacy Policy

1. Who we are

KlipPack ("we", "us") operates klippack.com and sells downloadable real estate deal tools, calculators, contracts, scripts, and SOPs. This policy explains what information we collect, why we collect it, and how we protect it.

2. Information we collect

• Account & purchase data, name, email address, and billing country at checkout. Checkout runs on Gumroad; payment details (card numbers, CVV) are collected and processed by Gumroad and never touch our servers.
• Newsletter subscriptions, email address and opt-in timestamp when you subscribe. Stored in Cloudflare KV, a zero-trust key-value store.
• Support messages, contents of emails or contact-form submissions you send to us.
• Support calls, if you call our support line ((225) 452-2507): your phone number (caller ID) and the audio and content of the call, which may include a transcript. The line is answered by an AI phone agent operated by Bland (see Section 4).
• Technical logs, IP address, user agent, and pages requested, retained for up to 14 days for abuse prevention.

3. How we use it

We only use your data to:

• Deliver products you have purchased and the product updates that follow.
• Send transactional emails (receipts, download links, product updates).
• Send follow-up emails to buyers after purchase (related-product suggestions and a review request).
• Send newsletter content only if you explicitly opted in.
• Detect fraud, abuse, and denial-of-service attempts.
• Respond to your support inquiries.

We never sell your personal data. We do not run third-party ad tracking or cross-site pixels on klippack.com unless you opt in through the consent banner (see Section 4). We keep data collection intentionally narrow: enough to deliver purchases, provide support, and protect the site from abuse.

4. Processors we use

• Gumroad, checkout, payment processing, and file delivery. Gumroad's privacy policy applies to card data and your purchase library.
• Cloudflare, hosting, CDN, edge compute, and storage (Workers, Pages, KV, R2). No data is retained in logs beyond 14 days.
• Cloudflare Web Analytics, privacy-first, cookieless visitor analytics. Does not fingerprint visitors. Used only to measure page views and aggregate referrers.
• Cloudflare Turnstile, CAPTCHA challenge on forms (newsletter, contact, reviews). Replaces invasive trackers; no cross-site profiling.
• Email delivery, transactional email sent through Cloudflare Email Service. Delivery logs retained up to 30 days.
• Bland, the AI phone agent that answers our support line. When you call, Bland receives your phone number (caller ID) and processes the audio and content of the call to handle your support request.

We load a small first-party script at /tracking.js on every page; it boots Cloudflare Web Analytics. It also holds an optional, consent-gated loader for Google Analytics 4 and Google Ads (conversion measurement). That loader runs only if you click "Accept all" on the consent banner; nothing from Google is loaded or stored if you decline or take no action. We do not run Meta Pixel. See the Cookie Policy for the current state.

Our checkout, hosting, security, analytics, and email processors operate under GDPR-compatible Data Processing Agreements.

5. Your rights

Depending on where you live, you may have the right to access, correct, export, or delete any personal data we hold about you. Email hello@klippack.com and we will respond within 30 days. EU/UK residents may also contact their local data protection authority.

6. Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you specific rights about your personal information.

(a) Categories of personal information we collect:

• Identifiers, email address, and your phone number (caller ID) if you call our support line.
• Commercial information, order history, products purchased.
• Financial information, payment is processed by Gumroad; we do not store card numbers.
• Internet / network activity, IP address and request logs collected for security and fraud prevention.
• Audio information, the audio and content of calls to our AI phone support line, which may include a transcript.

(b) Sources: directly from you (checkout, newsletter, contact form, and calls to our AI phone support line, including your caller ID) and automatically (server logs, Cloudflare edge).

(c) Business purposes: fulfilling orders, sending product updates, providing support, preventing fraud and abuse, complying with tax and legal obligations.

(d) Sale or sharing: We do not sell or share personal information for cross-context behavioral advertising or for monetary or other valuable consideration.

(e) Your rights: right to know what we collect, right to delete, right to correct, right to opt-out of sale/sharing (not applicable. We don't sell or share), and right to limit use of sensitive personal information (we do not collect sensitive PI).

(f) How to exercise rights: email hello@klippack.com from the address on file. We will verify your identity and respond within 45 days.

(g) Non-discrimination: we will not deny service, charge different prices, or provide a different level of quality because you exercised any CCPA right.

7. GDPR Legal Basis (EU/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases, depending on the purpose:

• Contract (Art. 6(1)(b)), to fulfill your order, deliver downloads, and send product updates for products you have purchased.
• Consent (Art. 6(1)(a)), newsletter subscriptions. You can withdraw consent at any time via the unsubscribe link.
• Legitimate Interests (Art. 6(1)(f)), fraud prevention, site security, and aggregate analytics. We balance these interests against your rights.
• Legal Obligation (Art. 6(1)(c)), retention of order and tax records for the period required by applicable tax law.

You may also lodge a complaint with your local data protection authority.

8. Data Retention

We keep personal data only as long as necessary for the purpose collected:

9. Cookies

KlipPack uses strictly-necessary cookies and a single functional affiliate-attribution cookie. Google Analytics / Google Ads cookies are set only if you accept the consent banner. See the full Cookie Policy for details.

10. Security

All traffic is encrypted in transit via TLS. Order and subscriber records are stored in Cloudflare's encrypted key-value storage. Payment information is handled by Gumroad and never leaves their infrastructure.

11. Contact

Questions about this policy? Email hello@klippack.com or use the contact form.