Skip to content

Exclusive beats · One copy only

Cave Recordzbeats by jontravelz

Privacy policy

Last updated 11 October 2026

1. Who is responsible

The controller of your personal data is [Jon's full legal name], Portugal, who runs Cave Recordz. Contact: hello@caverecordz.com.

2. What we collect

  • Orders: your name, email, the beat you bought, the amount, payment method and status. Card details go straight to Stripe; we never see them.
  • Downloads: when and how often each file was downloaded through your link.
  • Account: your email and sign-in codes, if you choose to sign in.
  • Custom requests: what you write in the form, your name and email.
  • Security: your IP address, briefly, to stop abuse (rate limits and the Cloudflare Turnstile check).

3. Why we use it

  • To sell and deliver your beat, issue your license and send your download link (performance of a contract).
  • To keep order and payment records as required by tax law (legal obligation).
  • To answer custom beat requests (steps you asked for before a contract).
  • To keep the shop secure and prevent fraud (legitimate interest).

We don't sell your data, don't use advertising or tracking cookies, and only email you about your order, sign-in or request.

4. Who we share it with

We use these providers to run the shop. They only process data on our behalf:

  • Convex (database and backend, USA)
  • Cloudflare (hosting, file storage and spam protection)
  • Stripe (card and MB WAY payments)
  • Swiss Bitcoin Pay (bitcoin payments, Switzerland)
  • Resend (email delivery, USA)

Where data leaves the EU, it is protected by the EU–US Data Privacy Framework, an EU adequacy decision (Switzerland) or the European Commission's standard contractual clauses.

5. How long we keep it

  • Order and payment records: 10 years, as Portuguese tax law requires.
  • Download logs: as long as the order record.
  • Accounts: until you ask us to delete yours.
  • Custom requests: up to 2 years after the last message.

6. Your rights

You can ask to access, correct, delete or export your data, or object to or restrict how we use it. Write to us and we will answer within a month. You can also complain to the Portuguese data protection authority, CNPD (www.cnpd.pt).

7. Cookies and storage

This site uses no tracking cookies. If you sign in, your session is kept in your browser's local storage so you stay signed in. The payment pages of Stripe and Swiss Bitcoin Pay set their own cookies under their own policies.