Privacy Policy

1. Who we are

“ACT-iOS” (also referred to as “the Service”, “we”, “us”, or “our”) is an independently-operated developer toolkit distributed as a private GitHub repository. This policy explains what personal information we collect when you purchase, use, or interact with the Service, and how we use that information.

2. Data we collect

We collect only the minimum information required to deliver the Service:

• Checkout data. Your name and email address are collected at checkout by our payment processor, Lemon Squeezy, and forwarded to us so we can provision access and send transactional email.
• GitHub username. To deliver the toolkit we ask for your GitHub username ascustom_dataon the Lemon Squeezy checkout. We use it solely to send you an invitation to the private GitHub repository that contains the toolkit.
• Billing metadata. Lemon Squeezy stores order IDs, subscription status, the last four digits of your payment method, billing country, and tax information as required by their merchant-of-record obligations. We receive a summary of this via webhook.
• Server logs. Our hosting provider Vercel keeps standard access logs which may include your IP address, user-agent, and the pages requested. These logs are used for security and debugging and are retained by Vercel under their own policy.

We do not collect analytics profiles, behavioural tracking data, or any content from the iOS projects you use the toolkit in. The toolkit itself runs locally on your machine and does not phone home.

3. Third parties we share data with

• Lemon Squeezy— merchant of record; processes payments, applies tax, handles refunds, and stores billing data on our behalf.
• Resend— sends the welcome email and any transactional email (receipts relayed from Lemon Squeezy are excluded; those come from Lemon Squeezy directly).
• GitHub— hosts the private repository. When we invite you as a collaborator, GitHub processes your username and associated account data under its own Privacy Statement.
• Vercel— hosts actios.dev. Standard request logs and edge cache are handled by Vercel.

We do not sell your personal data and we do not share it with advertising networks or data brokers.

4. Cookies and tracking

The actios.dev marketing site does not set first-party tracking cookies and does not embed advertising tags. If we enable Vercel Analytics in the future we will use its cookie-less, aggregated mode, and this policy will be updated accordingly.

5. Data retention

Your contact details and GitHub username are retained for as long as your subscription is active or you hold a lifetime licence, plus a reasonable period thereafter to handle support, chargebacks, and tax recordkeeping obligations (typically up to seven years for billing records, as required by Lemon Squeezy). On request we will delete any data under our direct control; data held by Lemon Squeezy for tax and anti-fraud purposes is subject to their retention policy.

6. Your rights

Regardless of jurisdiction, you may email support@actios.dev to:

• Access a copy of the personal data we hold about you.
• Correct inaccurate information.
• Request deletion of your account and associated data (note that this will also revoke your toolkit access).
• Object to or restrict certain processing where applicable under GDPR, UK GDPR, or the DPDP Act.
• Export your data in a machine-readable format.

We will respond to verified requests within 30 days. If you are in the EU/UK and believe we have mishandled your data, you have the right to lodge a complaint with your local supervisory authority.

7. Children

ACT-iOS is a professional developer tool and is not directed at children. The Service is not intended for anyone under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please email support@actios.dev and we will delete the data.

8. International transfers

The Service is operated from India. Our subprocessors (Lemon Squeezy, Resend, GitHub, Vercel) are located in the United States and the European Union. By using the Service you consent to the transfer of your data to these jurisdictions. Each subprocessor is contractually bound to protect your data at a standard comparable to what is described in this policy.

9. Security

We protect the data under our control with industry-standard measures, including TLS in transit, access-restricted cloud services, and a principle-of-least-privilege approach to who can view customer data. No system is perfectly secure, but we commit to notifying affected users within 72 hours of becoming aware of any breach that materially affects their personal information.

10. Changes to this policy

We may update this policy to reflect changes in the Service, our subprocessors, or the law. Material changes will be communicated by email to active customers at least 14 days before they take effect. The “Last updated” date above always reflects the current version.

11. Contact

For any privacy-related question, or to exercise any of the rights above, email support@actios.dev. We do not maintain a public postal address; all correspondence is handled by email.