Privacy Policy

Effective 2026-10-25

We collect as little as we can, we never sell it, and we do not track you around the web. This page explains exactly what we hold and how you control it.

Who we are

Buda Capone is a brand of Oliver Omni Systems LLC ("we", "us"). We are the controller of the personal information described here. Contact: budacapone1@gmail.com, [MAILING ADDRESS: the owner fills in].

What we collect

When you buy: your name, email, billing country and order details. Payments are handled by our payment providers (Stripe and PayPal). We never see or store your full card number.
When you download: the time, your IP address and the edition number, so we can deliver the file, stop link sharing and prove which copy is yours.
When you join the Inner Circle: your email and the emails you chose to receive. We ask you to confirm by clicking a link (double opt-in).
When you order merch: your shipping address and phone number, passed to the print partner that makes and ships it.
When you ask for a commission or write to us: what you send us.
The Vault Ledger: your name appears next to your edition number only if you opt in. Otherwise it shows "Private collector".

What we do not collect: we use no advertising trackers, no social-media pixels and no tracking cookies. If we ever measure visits, we will use privacy-friendly analytics that set no cookies and identify no one.

Why we use it (and our legal basis)

To deliver what you bought, support you and keep the records the law requires (contract; legal obligation).
To protect editions from piracy and fraud (legitimate interest).
To send the Inner Circle emails you asked for (your consent, which you can withdraw at any time).
To send order and download messages, which are not marketing (contract).

Who we share it with

Only the service providers that run the store for us, under contracts that limit them to our instructions: hosting (Cloudflare), payments (Stripe, PayPal), email delivery (Resend and our mail host), and the merch print partner. We share information if the law requires it, or to protect our rights against fraud. We do not sell or "share" personal information as those words are used in California law, and we never have.

We use AI assistants to help run the store, for example to draft emails or prepare orders. They work under the same rules as everything on this page, and your information is never used to train public AI models with our permission.

How long we keep it

Order and tax records: as long as tax law requires (usually up to 7 years).
Edition ownership: for as long as the edition exists, so your number stays yours.
Download logs: 12 months.
Inner Circle: until you unsubscribe. If you stop opening our emails for 90 days, we ask once whether you still want them, then remove you.

Your rights

Wherever you live, you can ask us to show, correct, download or delete your information, and to stop any marketing. Email budacapone1@gmail.com with the subject "Privacy request". We answer within 30 days (45 days where California law allows), we verify it is really you first, and we never treat you differently for asking.

California (CCPA/CPRA) and other US state laws: you have the right to know, delete, correct, and opt out of sale, sharing and targeted advertising. We do none of those three. We honour the Global Privacy Control signal. You may use an authorised agent.
EU, EEA and UK (GDPR): you also have the rights to restrict and object to processing, to data portability, and to complain to your local data-protection authority.
Email: every marketing email has a one-click unsubscribe link.

Some records we must keep even after a deletion request (for example, tax records and the fact that an edition was sold), but we keep only what the law requires.

Children

This site is not meant for children under 13 (under 16 in the EU and UK), and we do not knowingly collect their information. If you think a child has given us information, write to us and we will delete it.

Security and transfers

We use encryption in transit (HTTPS), access limited to the people who need it, and trusted providers. No system is perfectly secure; if a breach affects you, we will tell you as the law requires. Our providers may process information in the United States and other countries, under safeguards such as standard contractual clauses.

Changes

If we change this policy, we update the date at the top and, for important changes, we tell Inner Circle members by email first.