Privacy Policy

1. Who is responsible

IMABIT is responsible for the personal information described here. Our English-language storefront primarily serves United States customers and displays prices in USD. Privacy questions and requests go to privacy@imabit.com.

This notice describes our practices under Mexico’s Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP), California privacy disclosure standards, and other privacy laws where applicable. Statutory rights depend on your location and the law’s scope.

2. Information we collect and why

• Checkout and orders: your name, email, billing address, purchased items, order totals, and transaction status. We use these details to fulfill purchases, send receipts, handle order questions, and meet accounting and tax obligations.
• Account information: your username, email, and protected password representation. We use these to authenticate you, secure your account, and provide access to purchases. Passwords are stored as hashes, not readable text.
• Digital fulfillment: download permissions and history for ebooks or software, including relevant download times and technical delivery records. These support delivery, continued access, and investigation of fulfillment problems.
• Necessary technical records: IP address, request time, browser or device information, requested resources, and security events in server logs. These keep the service working and help prevent abuse.
• Messages you send us: your contact details and the contents of support or privacy requests, used to respond and resolve the request.

We receive information directly from you, automatically through essential site operations, and from payment providers confirming transactions. We do not request sensitive personal information. Please do not include it in messages.

Where GDPR applies, our grounds are performing a contract for orders and account access, legal obligations for required records, and legitimate interests in securing the service and resolving support issues. If a particular use requires consent, we request it separately. We do not use this information for behavioral advertising or automated decisions with legal or similarly significant effects. Required checkout details are necessary to complete an order.

3. Payments and service providers

Payments are handled entirely by PCI-compliant third-party gateways, such as Stripe or PayPal, as offered at checkout. IMABIT never stores or processes credit card numbers. The gateway collects payment credentials directly; we receive order-related confirmations, transaction references, and payment status.

We disclose only the information needed to providers supporting payment processing, hosting, transactional email delivery, and store operations. Hosting and email providers process contact, order, and technical information on our behalf. Payment providers may also act independently for fraud prevention and legal compliance under their own privacy notices. Review the notice of the gateway you choose at checkout.

We may disclose relevant records when legally required, to comply with tax obligations, or to protect legal rights. We do not sell personal information or share it for cross-context behavioral advertising.

4. Cookies and tracking

The site uses only strictly necessary cookies for authentication, session security, and cart functionality. They keep you signed in, associate a cart with your session, and support secure checkout. Blocking these cookies in your browser may prevent login or checkout from working.

We use no third-party ad networks, behavioral trackers, or marketing pixels, and do not allow third parties to track your activity across websites through our site for advertising. We do not change essential site operations in response to a browser’s Do Not Track signal. Our no-sale and no-advertising-sharing practices apply whether or not you send a Global Privacy Control signal.

A payment gateway’s own page may use cookies governed by its privacy notice.

5. Retention and security

We retain transaction and order data only for required tax and accounting periods and as needed to maintain active account access to purchases. Account and fulfillment records are kept while needed for that access. Technical logs are kept only as long as needed for operation and security; request correspondence is kept only as needed to resolve and document the request or meet legal obligations.

When these purposes end, we delete or anonymize the information, subject to legal preservation requirements. If deletion is restricted, we explain the reason and limit further use. Backup copies expire through the backup lifecycle. We use technical and organizational safeguards appropriate to the information, including access restrictions; no online service can guarantee absolute security.

6. Your rights and requests

Email privacy@imabit.com to request access, correction, deletion, or an export of your personal information. Include your name, the email used for your account or order, the right you want to exercise, and enough detail to locate the records. For corrections, describe the change. Do not send passwords or payment card details.

We verify identity proportionately before releasing or changing records, usually through confirmation sent to the relevant email address. An authorized representative may submit a request with evidence of authority; additional verification may be needed. We explain any refusal or information we must retain. Exercising privacy rights will not result in unlawful discrimination, although deleting an account or necessary fulfillment records may affect access to purchases.

We use WordPress’s Export Personal Data and Erase Personal Data tools for supported site records and review other relevant provider records separately. These tools do not automatically remove every record or override legal retention duties.

Mexico

You may exercise access, rectification, cancellation, and opposition (ARCO), limit use or disclosure, or revoke consent through the same email. Revocation does not undo prior lawful processing. ARCO determinations are communicated within 20 days, with approved requests implemented within the following 15 days, subject to lawful extensions and applicable counting rules. You may seek protection from Mexico’s Secretaría Anticorrupción y Buen Gobierno.

California

Where CCPA/CPRA applies, you may request the categories and specific pieces of information collected, sources, purposes, recipient categories, correction, deletion, and a portable copy, subject to legal exceptions. You also have rights concerning sale, advertising sharing, and qualifying sensitive-information uses. We do not sell or share information for advertising or use sensitive information to infer characteristics. This notice describes the categories we collect, use, and disclose; requests can also ask about the preceding 12 months. Where applicable, we acknowledge requests within 10 business days and respond within 45 calendar days, notifying you if a permitted extension is needed.

European Economic Area and United Kingdom

Where applicable, you may also request restriction, object to processing based on legitimate interests, withdraw consent for consent-based processing, and complain to your local data protection authority. We normally respond within one month and notify you of any lawful extension.

7. International processing

Hosting, email delivery, and other service infrastructure may process information on servers in the United States or European Union. Your information may therefore be processed outside your country, where privacy laws can differ.

We limit transfers to the purposes described here. Where legally required, transfers need an applicable safeguard, such as an adequacy decision or standard contractual clauses, or a specific legal exception. Contact us to ask about processing locations and the safeguards applicable to your information or to request a copy. Visiting this site does not by itself constitute consent to a transfer that requires separate consent.

8. Children’s privacy

Our storefront is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided information, contact privacy@imabit.com so we can investigate and delete it as required. Children under 13 should not create accounts or submit information.

9. Policy changes and contact

We post revisions on this page and update the date above. For material changes, we provide a prominent site notice and, where required, direct notice or a request for consent before a new use begins.

For questions about this policy or to exercise your rights, email privacy@imabit.com.