Legal draft
Privacy notice
This is a bootstrap placeholder and is not production legal text. Replace it with a reviewed privacy notice before onboarding customers.
Data needed for fulfilment
Customer contact details, payment references, target links, quantities, and order status are required to operate the service. Provider API keys and payment secrets must remain server-only.
Operational logging
Logs should use order identifiers and safe error codes. Raw API keys, payment secrets, passwords, and target links should not appear in routine telemetry.