Privacy Policy

Last updated: August 23, 2026

This Privacy Policy explains what personal information Jamal Knyte LLC ("we," "us," "our") collects when you use jamalknyte.com (the "Site"), why we collect it, who we share it with, and what rights you have over it.

We are a small business. We collect as little information as possible, we do not sell it, and we do not use it for advertising.

1. Who we are

Jamal Knyte LLC is a California limited liability company operating from Costa Mesa, California 92626, United States. For purposes of the EU and UK General Data Protection Regulation, Jamal Knyte LLC is the data controller of the personal information described in this policy.

Contact for all privacy matters: legal@jamalknyte.com

2. Age requirement

The Site is intended for people 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete it. If you believe a minor has provided us with personal information, email us and we will remove it.

3. What we collect

If you only browse the Site. We use privacy-focused, aggregate analytics that do not set cookies, do not create a profile of you, and do not track you across other websites. This produces anonymous statistics such as total page views, referring sites, approximate country, and device type. We cannot use it to identify you. We currently use Vercel Analytics for this purpose. Our hosting and network providers also generate standard server logs, which may include your IP address, browser type, and request time, retained for a limited period for security and reliability.

If you buy something. We collect your email address to deliver your purchase and contact you about your order; your country, required to calculate and remit sales tax and VAT correctly; and your order record — what you bought, when, the amount, and a transaction reference.

We never see, receive, or store your payment card details. Payment is processed entirely by Stripe, Inc. Your card number, expiry, and security code go directly to Stripe and never touch our systems.

If you create an account. An account is created automatically when you purchase, so you can access what you bought. We do not use passwords — you sign in using a one-time link sent to your email. There is no password for us to store and none for an attacker to steal. Your account holds your email address, purchase history, and any feedback you choose to leave.

If you join our mailing list. This is entirely optional and separate from purchasing. You must actively opt in by checking a box that is never pre-checked. Buying a product does not subscribe you to anything. You can unsubscribe at any time using the link in any email, effective immediately.

If you leave product feedback. Buyers can leave a positive or negative reaction and a written comment on products they purchased. We store the comment, the product it relates to, and the time submitted. Comments are reviewed before publication.

If you email us. We keep your message and email address so we can respond and maintain a record.

4. Why we collect it, and our legal basis

We deliver purchases and send order confirmations on the basis of performance of a contract. We calculate and remit tax and retain financial records on the basis of legal obligation. We send marketing email only on the basis of your consent, withdrawable at any time. We run aggregate cookieless analytics and prevent fraud and unauthorized sharing of paid products on the basis of legitimate interests. We publish product feedback on the basis of your consent in submitting it.

5. Who we share it with

We do not sell your personal information. We do not share it for advertising. We share information only with service providers who help us operate the Site, and only to the extent they need it. Each is bound by contract to protect your information and use it solely for the services they provide to us.

Stripe, Inc. handles payment processing and tax calculation and receives your email, country, and the payment details you enter directly. Supabase, Inc. provides database and file storage and holds your account record, order history, and feedback. Vercel, Inc. provides hosting and analytics and receives standard server request data. Resend sends transactional email and receives your email address and message content. Cloudflare, Inc. provides DNS, security, and bot protection and receives standard network request data.

We may also disclose information where legally required — for example, in response to a valid subpoena, court order, or lawful government request — or where necessary to establish, exercise, or defend legal claims. If the business is ever sold or transferred, your information may transfer as part of that transaction, and we would notify you beforehand.

6. International transfers

We operate from the United States, and our service providers store and process data in the United States and other countries. If you are in the European Economic Area, the United Kingdom, or Switzerland, your personal information is transferred outside your home jurisdiction. We rely on the Standard Contractual Clauses approved by the European Commission, and the UK International Data Transfer Addendum where applicable, as the legal mechanism for these transfers.

7. How long we keep it

Your account and email address are kept until you delete your account. Order records are retained for 7 years as required by tax law, anonymized after account deletion. Mailing list subscriptions are kept until you unsubscribe. Product feedback is kept until you delete it or your account. Server logs are retained as set by our hosting providers, typically 30 to 90 days. Email correspondence is kept up to 3 years.

8. Deleting your account

You can delete your account at any time from your account settings, or by emailing us. Please read this before you do it.

Your email address, account, and any feedback you have written are permanently deleted and cannot be recovered. Your licenses are revoked and you lose access to anything you purchased. We cannot restore access afterward — if you want your files, download them first. Your order records are anonymized, not deleted: the sale amount, date, and product remain, but are no longer linked to you. We are legally required to retain sales records for tax purposes, as permitted under GDPR Article 17(3)(b) and the equivalent CCPA exemption. You are also removed from the mailing list.

We complete deletion requests within 30 days, and usually immediately. You may create a new account with the same email address afterward. It will be empty, and previous purchases will not carry over.

9. Your rights

Depending on where you live, you have rights to access a copy of what we hold, correct anything inaccurate, have your information deleted subject to our legal retention obligations, receive your information in a machine-readable format, object to processing based on legitimate interests, ask us to restrict how we use it, and withdraw consent at any time.

To exercise any of these, email legal@jamalknyte.com. We respond within 30 days, or 45 days for California requests. We verify your identity first, usually by confirming you control the email address on the account. We will not charge you, discriminate against you, or degrade your service for exercising these rights.

California residents: see Your Privacy Choices for CCPA-specific disclosures. EU and UK residents also have the right to lodge a complaint with a local data protection authority, though we would appreciate the chance to address your concern first.

10. How we protect your information

All traffic to the Site is encrypted in transit using TLS, enforced by HSTS. Data is encrypted at rest by our database provider. We do not store passwords, because we do not use them. We do not store payment card details, because Stripe handles them. Secret credentials are stored in server-side environment variables and never exposed to your browser. The Site enforces a strict set of security headers and bot protection, and access to production systems is limited to the business owner.

No system is perfectly secure. If a breach occurs that presents a risk to you, we will notify affected individuals and the relevant authorities within 72 hours of becoming aware of it, as required by GDPR Article 33 and applicable US state law.

11. Cookies

We do not use advertising cookies, tracking cookies, or third-party marketing cookies, and our analytics are cookieless. We use a small number of strictly necessary cookies to keep you signed in and protect the Site from automated abuse. Full detail is in our Cookie Policy.

12. Automated decision-making

We do not make automated decisions that produce legal effects or similarly significant effects about you. We do not profile you.

13. Changes to this policy

We may update this policy as the Site changes, and will update the "Last updated" date above. If we make a change that materially affects your rights, we will notify you by email before it takes effect, provided we have your address.

14. Contact

Jamal Knyte LLC
Costa Mesa, California 92626
United States
Email: legal@jamalknyte.com