Privacy Policy

Effective date: Pending review: to be confirmed

André Murphy is an individual sole proprietor based in California who operates this bookstore under the publishing brand Ash & Echo Press. Ash & Echo Press is a brand name, not a separate legal entity. In this policy, “we,” “us,” and “our” refer to André Murphy. Contact: ash.echo.press@gmail.com.

This policy explains what information we collect when you use our website, create an account, and buy digital books, and how we use it.

Who our services are for

Our store is for adults aged 18 or older. Purchases are currently available only to customers with a United States billing address. We do not knowingly collect information from anyone under 18.

Information we collect

Account information: your email address and a securely hashed password for email-and-password accounts, or, if you sign in with Google, the basic profile information Google shares with us (such as your email address and name). We also record that you confirmed you are at least 18 years old and when you did so.
Order information: the books you purchase, order reference, amounts, currency, order status, and the date. We also keep the payment and checkout reference numbers Stripe provides.
Billing information: Stripe collects your billing details and payment card information. We receive your email, billing country, and payment status, which we use to confirm eligibility and fulfil orders. We do not receive or store your full card number.
Library and download activity: which books are in your library and records needed to give you secure download access.
Messages: anything you send us by email.
Technical information: when you use the site, our hosting provider and error-reporting tools may process technical data such as IP address, browser type, pages requested, timestamps, and error details. We use it to operate, secure, and fix the site.

How we use information

We use it to create and secure your account, process and fulfil orders, deliver your digital books, confirm age and U.S.-purchase eligibility, calculate and collect applicable taxes, prevent fraud and abuse, provide customer support, meet legal, tax, and accounting obligations, and maintain and improve the site.

Service providers

We rely on these providers, which process information on our behalf or under their own terms:

Lovable Cloud — website hosting, database, user accounts, file storage, and error reporting.
Stripe and Link — purchases are sold through Link using Stripe Managed Payments. Link is the merchant of record for these transactions and provides payment receipts and transaction-related support. Stripe handles checkout, payment processing, tax calculation, and fraud prevention, and processes your payment information under its own privacy policy (stripe.com/privacy). André Murphy provides the ebooks, My Library delivery, and product support through Ash & Echo Press.
Google — optional "Sign in with Google," and web fonts loaded from Google's servers, which receive your IP address and browser information when a page loads. Google's privacy policy: policies.google.com/privacy.

Selling and sharing

We do not sell your personal information for money. We use the service providers described above to operate the store and fulfil purchases. We may also disclose information when required by law, to protect our rights or prevent fraud, or in connection with a transfer of the business. Pending review: California "sale"/"sharing" wording

Cookies and browser storage

We use your browser's local storage to keep you signed in and remember your cart. Stripe's embedded checkout may use cookies for fraud prevention and security. Clearing the relevant browser storage can sign you out and remove your saved cart.

Newsletter signup is currently closed. Buying a book or creating an account does not subscribe you to marketing emails.

How long we keep information

We do not have a fixed deletion schedule. We keep account and library information while your account exists. We keep order, payment, and tax records as long as reasonably needed to meet legal, tax, and accounting obligations, resolve disputes, prevent fraud, and enforce our terms. Technical logs are kept according to our hosting and service providers' practices. When information is no longer needed for these purposes, we delete it or make it non-identifying.

Your choices and rights

You may contact us at ash.echo.press@gmail.com to ask to access, correct, or delete your personal information. Account deletion is currently handled by request rather than through the website. We may need to verify your identity. We may keep certain records where the law requires or allows it, such as order and tax records. Deleting your account ends your online My Library access; download any books you wish to keep first. Depending on where you live, you may have additional rights under applicable law. Pending review: California privacy rights language

Security

We use reasonable safeguards, including encrypted connections, access controls, and private storage for book files with short-lived download links. No method of transmission or storage is completely secure.

Changes

We may update this policy. We will post the updated version on this page with a new effective date.

Contact

André Murphy, individual sole proprietor operating under the publishing brand Ash & Echo Press — ash.echo.press@gmail.com. You can also reach us through our Contact page.