Policy draft

Privacy notice

Draft for operator review. This template describes current application behavior and is not legal advice. The operator must review it for the deployed services, jurisdiction, retention periods, and applicable privacy laws before launch.

This site may process account name and email, a password hash, authentication tokens held by your browser, and order details needed to provide the marketplace. Passwords are hashed by the server before they are stored. Do not reuse passwords from other services.

Payments

When configured, checkout redirects to PayPal. Payment credentials are entered on PayPal; QMarketplace does not request or store card numbers. The backend receives the PayPal order and capture identifiers and records order status and amount.

Study material files

When private file storage is configured, purchased downloads use short-lived signed URLs. Public catalog responses do not include private storage keys or paid file URLs.

Storage and deployment

Account and order records are persistent only when PostgreSQL is configured. Without a database, development-mode records are held in memory and are lost when the server restarts. The site does not currently describe a retention schedule or support automated account deletion.

Contact and requests

A support contact channel is not configured in this deployment. The operator must publish a monitored contact method and update this notice before collecting customer data in production.