The short version
ENVLD is a small studio. We need an email to send your receipts and a name to put on the invoice, and that's most of it. Everything else (analytics, cookies, error logs) is either there to keep the site running or to help us understand what works. We don't resell your data and we don't mine it. If you want it deleted, reply to any email from us and it's gone within seven days.
What we collect, and why
When you buy a template
Your name, email, billing country, and the payment status we get back from our payment provider. The card details never touch our servers; they stay with the payment processor. We keep order records for as long as tax law requires, then delete them.
When you create an account
Your email, optionally a name, and a hashed password. We never see the raw password. We also log the time you last signed in, so we can warn you if a session looks off.
When you send a brief
Whatever you put in the brief: name, company, project description, budget, timeline. We use it to scope a quote and reply to you. Briefs live in our admin tooling until the project closes, then they're archived for two years and deleted.
Cookies and analytics
We use a single session cookie to keep you signed in. For analytics we use a privacy first product (PostHog or Plausible, depending on the project phase): no third party ad trackers, no fingerprinting. If you arrive from an affiliate referral link, we store the referral code in a first party cookie for 30 days so the referrer gets credit.
Who we share it with
The only people who see your data are the people at ENVLD who need to (right now, a very small number). The services that process it on our behalf are:
- Supabase: our database and user accounts.
- Netlify: hosts the website itself.
- Our payment provider: a Merchant of Record that runs checkout and processes payments. They hold your card details, not us, and keep their own privacy policy. They are PCI compliant.
- Cloudflare R2: stores template ZIPs and project files.
- Resend: sends our transactional and marketing emails.
That's the full list. We're not in the business of sharing your data with anyone else, and we never sell it.
Where your data is processed
We're a small team working across borders, and the services above run on servers in different regions, including the EU and the United States. When your data moves between regions, it stays protected by the same standards described here and by each provider's own safeguards. If you'd like specifics on where a particular piece of data lives, just ask.
How we protect it
Traffic to and from the site is encrypted over HTTPS. Passwords are stored hashed, never in plain text. Template files and project deliverables are served through short lived, signed links rather than public URLs, so only the buyer can download them. Access to our admin tooling is limited to accounts that need it. No system is perfect, but we treat your data like it's our own.
You get three kinds of email from us:
- Transactional: receipts, account confirmations, project updates. You can't opt out of these; they're part of the service.
- Onboarding: a short welcome sequence after you sign up. Every one of these has a one click unsubscribe in the footer.
- Drops: a heads up when something new lands in the shop. Off by default, and you control it from your account settings.
Your rights
You can ask us, any time, to:
- Export every byte of data we hold on you.
- Correct anything that's wrong.
- Delete your account and everything tied to it.
Reply to any email from us, or write to contact@envld.com, and we'll handle it within seven days. If you're in the EU you have these rights under GDPR; if you're in California, under CCPA. Same rights either way.
Children
ENVLD isn't for anyone under 16. We don't knowingly collect data from minors. If you think we have, write to us and we'll delete it.
Changes to this page
If we change anything material, we'll email everyone with an account before it takes effect. The “last updated” date at the top always reflects the latest revision.
Contact
Questions, complaints, or you just want to talk about privacy? contact@envld.com. We read every email.