Privacy policy

This policy explains how PT Digital Orogeny Ventures, trading as HardPartDone (“we”, “us”), handles personal data for the HardPartDone website and application. We are the data controller for that data. Our registered office is Plaza Aminta Lantai 5/504, Jl. TB Simatupang Kav. 10, Pondok Pinang, Kebayoran Lama, Jakarta Selatan 12310, Indonesia, and you can reach us on +62 813 1529 6903 or at privacy@hardpartdone.com.

What we collect

Information you give us

• Account details — your name and email address, and a hash of your password. We never store the password itself.
• What you create — designs you upload or generate, mockups, listing copy, and any mockup templates you upload.
• Messages — anything you send us through the contact form or by email.

Information we generate

• Usage records — which actions you ran and what they cost in credits, kept as a ledger so any balance can be explained back to you.
• Technical logs — errors and request records needed to keep the service working and secure.

Information from others

• Payment records — our payment provider tells us that a payment succeeded, which plan it was for, and the billing country. We do not receive or store your card number.

What we do not do

We do not sell personal data. We do not use your designs, uploads or listing copy to train machine-learning models. We do not read your Etsy account: the browser extension works inside your own signed-in session and your Etsy password never reaches us.

Why we are allowed to hold it

• To perform our contract with you — running your account, generating what you ask for, taking payment.
• Legitimate interests — keeping the service secure, preventing abuse, and understanding which features are used.
• Legal obligation — retaining financial records for as long as tax law requires.

Who we share it with

Only the suppliers needed to run the service, each handling data on our instructions:

• Paddle — our merchant of record. Paddle processes the payment, handles sales tax and VAT, and is the data controller for payment data it collects.
• Cloud hosting and storage — where the application runs and where your images and files are stored.
• AI model providers — the text and image models used when you ask for a generation receive the prompt and, for analysis, the image. They do not receive your account details.

We may also disclose data where the law requires it, or to establish or defend a legal claim.

Where it is held

Our suppliers operate internationally, so your data may be processed outside your country. Where it leaves the UK or EEA we rely on the safeguards those suppliers have in place, such as standard contractual clauses.

How long we keep it

• Account data and what you create — until you delete it, or your account closes.
• After an account closes — up to 30 days, so an accidental deletion can be reversed, then removed.
• Dormant accounts — if you have not signed in for 12 months we will email you. If there is still no sign-in a month after that, your designs, mockups and other files are archived: they stop being available in the app, but nothing is deleted and we can restore them in full if you ask. 30 days after archiving, the files themselves are deleted and cannot be recovered. Your account and listing text stay. Cancelling a paid plan never triggers this — the clock is time since you last signed in, and a free account you still use is not dormant.
• Financial records — as long as tax law requires, typically six or seven years.

Your rights

Depending where you live you may have the right to get a copy of your data, correct it, delete it, restrict or object to how we use it, and to take it elsewhere in a portable form. Every finished listing can already be downloaded as a zip from inside the app.

To exercise any of these, email privacy@hardpartdone.com. We will reply within 30 days. If you are unhappy with our answer you can complain to your local data protection authority.

Cookies

We use cookies that are necessary for the service to work — keeping you signed in and protecting forms from cross-site request forgery. Checkout runs cookies from our payment provider. We do not use advertising cookies.

Children

The service is for people running a business and is not intended for under-16s. We do not knowingly collect their data.

Changes

If we change this policy we will update the date at the top, and tell account holders by email where the change is significant.

Contact

Privacy questions: privacy@hardpartdone.com. Anything else: support@hardpartdone.com.