Privacy Policy

Last updated: 13 October 2026 · Effective: 13 October 2026

This policy explains what personal data Spec72 collects when you buy a pack, why, and what you can ask us to do with it. The data controller is Hans Karlsson, an individual trading as Spec72, contact hkarlsson00@gmail.com.

What we collect

• Contact details: your name and email address, from your order and our emails.
• Order details: which pack you bought, your order or receipt ID, and the date.
• Project material you send us: repo URL, your SKILL.md or other files, agent transcripts, a short description of what breaks, and the role or name of your handoff owner.
• Messages you send us about your order.

Please do not send private keys, passwords, wallet seeds or live API keys. We never ask for them.

Payment data

Card payments are processed by Gumroad, which collects your card details, billing address and tax information and handles taxes and receipts for Gumroad orders under its own privacy policy. PayPal payments are processed by PayPal under its own privacy policy. Spec72 never sees or stores your full card details. We receive only what we need to fulfil the order, such as your name, email, the product and the order number.

Why we use it

• To do the work you paid for and deliver it to you (performance of a contract).
• To answer questions, handle revisions and process refunds.
• To keep basic business and tax records where the law requires it.

We do not use your data for advertising, and we do not sell or rent it to anyone.

Cookies and analytics

spec72.dev does not use analytics tools, advertising pixels or tracking cookies. Like any website, our hosting provider (Cloudflare) processes basic technical data such as IP addresses in server logs to deliver and protect the site.

Who else handles your data

• Cloudflare: website hosting and order records submitted through the site.
• Google (Gmail): email communication and delivery.

spec72.dev accepts the payment methods below. If you pay through one of them, that provider processes your payment data as an independent processor under its own privacy policy:

• Gumroad: card checkout.
• PayPal: PayPal.Me payments.
• On-chain crypto payments (USDC on Base or Solana, and ETH): these are made from your own crypto wallet. Blockchain transactions, including your wallet address and the amount, are public and permanent, and we cannot delete them.

Some of these providers may process data outside your country, including in the United States, under their own safeguards.

How long we keep it

• Project material you send us (repos, files, transcripts): deleted within 30 days after delivery, unless you ask us to keep it longer.
• Order records and emails: kept for as long as needed for accounting and legal obligations, then deleted.

Your rights

You can ask us to access, correct, export or delete your personal data, or object to how we use it. Email hkarlsson00@gmail.com and we will reply within 30 days. We may keep records we are legally required to keep, such as tax records. If you are in the EU or UK, you can also complain to your local data protection authority.

Changes

If we change this policy, we will update the date at the top of this page.

See also our Terms of Service and Refund Policy.