Privacy Policy

This policy explains what G3X collects, why, and what rights you have. G3X is the data controller.

1. What we collect

• Account data: email, display name, optional phone, country, avatar.
• Order data: products purchased, amounts, currency, delivery status, Stripe payment reference (never your full card number).
• Technical data: IP address, browser, and pages visited, used for security and analytics.
• Communications: emails you send us and delivery logs of transactional emails.

2. Why we use it

• To deliver the products you purchase.
• To secure the platform, detect fraud, and enforce our Terms.
• To send transactional emails (order confirmations, security notices).
• To comply with legal and tax obligations.

3. Who we share with

• Stripe — payment processing.
• Supabase — hosting, database, and email delivery infrastructure.
• Sellers — only the minimum data needed to fulfill an order.
• Legal authorities when required by law.

We never sell your personal data.

4. Data retention

Account and order data are kept as long as your account is active, plus the periods required by tax and accounting law. You can request deletion at any time.

5. Your rights

You may request access, correction, deletion, or export of your data by emailing privacy@g3x.com. We respond within 30 days.

6. Security

All connections are encrypted with TLS. Passwords are salted and hashed. Payment data is handled solely by Stripe. Access to our database is protected by row-level security policies and role-based access control.

7. Cookies

We use strictly necessary cookies for authentication and session management. Optional analytics cookies require your consent.

8. Contact

Questions or requests: privacy@g3x.com.