Last updated: May 14, 2026
This policy explains how Fluxhive ("we," "our," or "us") collects, uses, and protects your personal data when you use our platform at fluxhive.app.
Table of Contents
Fluxhive operates the digital marketplace at fluxhive.app, where creators sell and buyers purchase digital products including templates, e-books, prompts, software tools, and other downloadable assets.
This Privacy Policy describes what personal data we collect, why we collect it, how we use it, and the rights you have over your data. It applies to all visitors, registered users, buyers, and sellers who interact with fluxhive.app.
By using Fluxhive, you acknowledge that you have read and understood this policy. If you do not agree with any part of this policy, please discontinue use of the platform.
When you register an account, we collect:
When you make a purchase, we collect and retain:
We automatically collect certain technical data when you visit the platform:
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes — ever.
We share data only with trusted service providers who help operate the platform:
All payment processing is handled by Stripe, Inc. Stripe receives billing details, payment card data, and order amounts directly. Fluxhive receives only tokenized payment references and payment status. Stripe is PCI-DSS Level 1 certified. Review Stripe's privacy policy at stripe.com/privacy.
Our application data — including user accounts, product records, and order history — is stored in Supabase, which is hosted on AWS infrastructure. Supabase handles authentication session tokens and row-level security. Data is stored in the region configured for our project. Review Supabase's privacy policy at supabase.com/privacy.
The Fluxhive web application is hosted on Vercel. Vercel processes HTTP request data (including IP addresses) to serve pages and API routes. Vercel retains server logs for a limited period. Review Vercel's privacy policy at vercel.com/legal/privacy-policy.
We use Resend to deliver transactional and marketing emails. Resend processes recipient email addresses and message content on our behalf. Review Resend's privacy policy at resend.com/legal/privacy-policy.
We may disclose personal data if required by law, court order, or government request, or when necessary to protect the rights, property, or safety of Fluxhive, our users, or the public.
If you are located in the European Economic Area (EEA), United Kingdom, or another jurisdiction with data protection legislation, you have the following rights regarding your personal data:
Right of Access
You may request a copy of all personal data we hold about you, including account details, purchase history, and any usage data linked to your identity.
Right to Rectification
You may request correction of inaccurate or incomplete personal data. You can update most account information directly via your account settings.
Right to Erasure (Right to be Forgotten)
You may request deletion of your personal data. Note that we may be required to retain certain records (e.g., purchase records for tax compliance) even after account closure. See Section 8 for retention details.
Right to Data Portability
You may request an export of your personal data in a structured, machine-readable format (e.g., JSON or CSV) for transfer to another service.
Right to Object
You may object to the processing of your data for direct marketing purposes at any time. You may also object to processing based on our legitimate interests.
Right to Restrict Processing
You may request that we limit the processing of your data in certain circumstances, such as while a rectification request is being resolved.
To exercise any of these rights, contact us at support@fluxhive.app. We will respond within 30 days. We may need to verify your identity before processing your request.
If you believe we have not handled your data appropriately, you have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK, or your national supervisory authority in the EU).
We take the security of your personal data seriously and implement multiple layers of protection:
Note: While we apply industry-standard security controls, no system is completely immune to breaches. In the event of a data breach affecting your personal data, we will notify affected users as required by applicable law.
We retain different categories of data for different periods, based on business necessity and legal requirements:
Account Data
Retained for as long as your account is active. If you delete your account, your personal account data (name, email, preferences) is deleted within 30 days, subject to the exceptions below.
Purchase Records and Transaction History
We retain purchase records, payment references, and order details for 7 years from the date of transaction to comply with tax, accounting, and legal obligations. This data may be retained even after account deletion.
Analytics Data
Aggregate and anonymized analytics data collected via Google Analytics is retained for 2 years, after which it is automatically deleted per Google Analytics data retention settings.
Support Communications
Support tickets and email correspondence are retained for up to 2 years to enable effective customer service and dispute resolution.
Security and Fraud Logs
Access logs, download event logs, and fraud-detection records are retained for up to 1 year or as required by applicable law.
To request early deletion of your data, contact support@fluxhive.app. Requests will be honored subject to our legal retention obligations.
Fluxhive is not intended for, and does not knowingly collect data from, children under the age of 13.
Our platform and digital products are designed for adults and businesses. We do not knowingly register accounts for, sell to, or market to children under 13 years of age. This policy is consistent with the Children's Online Privacy Protection Act (COPPA) in the United States, and equivalent laws in other jurisdictions.
If you believe a child under 13 has created an account or provided personal data to Fluxhive without verifiable parental consent, please contact us immediately at support@fluxhive.app. We will promptly investigate and, where confirmed, delete the child's account and all associated data.
Users between ages 13 and 18 should use the platform only with the supervision and consent of a parent or legal guardian.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:
Your continued use of Fluxhive after the effective date of any updated policy constitutes your acceptance of those changes. If you do not agree with the updated policy, you should discontinue use of the platform and may request account deletion.
We encourage you to review this page periodically to stay informed about our data practices.
If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal data, please reach out:
For data subject requests under GDPR or CCPA (access, erasure, portability, objection), please email support@fluxhive.app with the subject line "Data Subject Request" and include your account email address so we can verify your identity.