Privacy Policy

Last Updated: 10/12/2025

HRMNYX ("we", "us", "our") is committed to protecting your privacy and minimizing data collection. This Privacy Policy explains the flow of information when you use our website (www.hrmnyx.com) and purchase our products.

1. Our Philosophy on Data Privacy

Our systems are architected to avoid collecting or storing your personal information wherever possible. We have intentionally chosen secure, best-in-class third-party services to handle sensitive data so that we do not have to. We do not operate our own databases of customer personal information. This policy outlines the necessary data processing performed by these services to complete your purchase and provide our services.

2. Data Processing for Paid Purchases

To be fully transparent, here is what happens with your data when you make a purchase:

  • At Checkout: You provide personal and payment information directly to our third-party Merchant of Record, Paddle.com. This includes your email address, country, and full payment details.
    • Crucially, we do not directly collect, handle, or store your sensitive payment information. This is all handled securely by Paddle's PCI-DSS compliant systems.
  • For Order Fulfillment: After successful payment, Paddle sends a webhook confirmation to our secure backend system. This payload from Paddle includes your email address. Our system's first and only action with this information is to cryptographically verify the webhook's authenticity. Immediately following verification, all personally identifiable information from this payload, including your email address, is permanently discarded before any further processing. We create an anonymous internal record tied only to your Transaction ID to facilitate delivery. We do not store your email address on our systems.

3. Data Processing for Free Products

To prevent abuse (such as bot-driven bandwidth consumption) of our free product downloads, we implement a temporary, automated rate-limiting system.

  • This system temporarily logs your IP address to count the number of downloads initiated from it.
  • This log is strictly for this security purpose, is not connected to any other personal data, is stored for a maximum of 24 hours, and is then automatically and permanently deleted.
  • Our permanent audit logs for free downloads, which we retain for our business records, are anonymous and do not contain IP addresses. They only contain the product name, timestamp, and non-identifying location data (country and state/region).

4. Data Roles: Controller and Processors

Under data protection law (like GDPR), there are different roles for handling data:

  • Data Controller (HRMNYX): That's us. As the owner of this website and the provider of the products, we are considered the Data Controller.
  • Data Processors (Our Service Partners): These companies process data on our behalf. They are:
    • Paddle.com: Our Merchant of Record for processing all payments and billing information.
    • Cloudflare, Inc.: Provides our website hosting, security, and the backend logic (Cloudflare Workers) that orchestrates product delivery and temporary rate-limiting.

5. How Your Information Is Used

All fulfillment, delivery, and customer support actions for paid purchases on our platform are handled using your anonymous Transaction ID. If you require support (such as locating a lost Transaction ID), we will use our partner, Paddle, to look up your purchase information using the details you provide to us (like your email address). Our system cannot perform this lookup, as we do not store your personal data from purchases.

We do not sell your personal information or use it for marketing purposes.

6. Data Security and Retention

We employ a "privacy-first" architecture that separates transactional data from personal data.

  • Data with our Merchant of Record: Your purchase record, including your email address and transaction history, is maintained securely within Paddle's system.
  • Our Legally-Defensible Audit Trail: To protect both you and our business, our system generates a permanent, anonymous audit log for every transaction and free download. This log serves as definitive proof that delivery was successfully initiated. Crucially, this permanent audit log does not contain any of your personal information like your email address, name, or raw IP address.

7. Your Data Protection Rights and How to Exercise Them

As the business you have a direct relationship with, HRMNYX is your single point of contact for exercising your data protection rights. Depending on your location, you have the right to request access to, correction of, or deletion of your personal data.

  • How to Make a Request: To exercise any of these rights, you must prove your identity to protect your data from unauthorized access. Please send your request to us at hrmnyxofficial@gmail.com from the email address you used to make the purchase.
  • What to Include: In your request, you must also include your unique Transaction ID, which can be found on your official receipt from Paddle.com.
  • What Happens Next: Upon receiving your request, we will verify that the requesting email address and the Transaction ID match the transaction records held by our payment processor, Paddle. We require both pieces of information to proceed. Once verified, we will coordinate with our service providers to fulfill your request as required by law.

8. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at hrmnyxofficial@gmail.com.