Privacy.

What we collect

• When you buy: your email address, what you bought, when, in which currency, and the Stripe reference for the payment. Your card or bank details go to Stripe; we never receive them.
• When you open a purchase: the time and the network address of each download, so we can spot a link being shared and keep the shop fair to sellers.
• When you sell: your name, email, the shop name you choose, and the Stripe account id that connects you. Your identity documents and bank details are held by Stripe, not by us.
• When you apply to sell: your name, email, and the portfolio link you send.
• Everywhere: a cookie that remembers your currency, and privacy-respecting page analytics that count visits without identifying you.

Why

To deliver what you bought and let you find it again, to pay sellers, to answer refund requests, and to keep the shop working. We do not sell or rent your data, and we do not use it for advertising.

Who else sees it

• Stripe processes payments and, for sellers, verification and payouts.
• The seller of a template you buy sees the order — what was bought and when — but not your email address unless you contact them.
• Vercel hosts the shop; Resend sends its emails. Each sees only what it needs to do that.

How long we keep it

Order records are kept for as long as your access link is meant to work, and for the period Malaysian law requires us to keep sales records. Seller applications we do not take up are deleted after a year.

Your rights

Under Malaysia’s Personal Data Protection Act you can ask what we hold about you, have it corrected, or have it deleted where we no longer need it. Write to hello@korvastudio.com.

Contact

Korva Studio, Kuala Lumpur & Selangor, Malaysia. hello@korvastudio.com.