Launch pricing: All templates at early-adopter rates - prices increase June 9th. Shop now →

Privacy Policy

Last updated: May 16, 2026

TheKitBase respects your privacy. We collect only what we need, never sell your data, and aim to be fully transparent about how your information is used.

1. Who We Are

TheKitBase is an independent business based in India. Our website is located at thekitbase.app. For privacy-related questions, contact us at privacy@thekitbase.app.

2. Data We Collect

We collect the following types of data:

Purchase data

When you buy a template, we store your email address, order ID, license key, and download metadata. We do not store payment card details - payment is handled entirely by Dodo Payments as Merchant of Record.

Newsletter email

If you subscribe to our newsletter, your email address is stored with Kit.com to send product updates and new template announcements. You can unsubscribe at any time.

Contact and support communications

If you contact us via the contact form or by email, we retain your name, email address, and message to resolve your issue and improve our service. These messages are handled via Resend.

Technical logs

Our hosting provider Vercel may log IP addresses and request metadata as part of standard server operation. We do not use this data for profiling.

Analytics

We use Umami Cloud, a privacy-focused analytics service, to understand how visitors use thekitbase.app. Umami collects aggregated usage data such as pages viewed, referrer URL, browser and device type, operating system, and approximate country. Umami does not use advertising cookies and does not track you across other websites. Data is processed by Umami Cloud (cloud.umami.is).

3. How We Use Your Data

We use the data we collect for the following purposes, under the legal bases noted:

  • Process and fulfil your template purchase (contract)
  • Generate and deliver your license key and download link (contract)
  • Provide technical support (legitimate interest)
  • Send product updates and announcements, if you have opted in (consent)
  • Comply with legal and financial record-keeping obligations (legal obligation)
  • Maintain the security and integrity of our platform (legitimate interest)
  • Understand how visitors use our website and improve thekitbase.app (legitimate interest)

We do not sell, rent, or share your personal data with third parties for their own marketing purposes. Service providers listed below receive data only to the extent necessary to perform their function.

4. Third-Party Services

We use the following third-party services to operate TheKitBase:

Dodo Payments

Merchant of Record

Dodo Payments acts as Merchant of Record for all purchases. They handle payment collection, buyer-side tax calculation and remittance, and receipts. Dodo Payments holds all payment card data - TheKitBase does not receive or store card details.

Dodo Payments Privacy Policy

Resend

Transactional email

We use Resend to send transactional emails (license keys, download links, support replies) and to process contact form submissions. Your email address and message content are transmitted to Resend for delivery.

Resend Privacy Policy

Kit.com

Newsletter

If you subscribe to our newsletter, your email address is stored with Kit.com (formerly ConvertKit). This applies only to newsletter subscribers. Kit.com is not involved in purchase or support flows.

Kit.com Privacy Policy

Cloudflare R2

File storage

Template files are stored securely on Cloudflare R2 and delivered via signed download links after purchase. Cloudflare processes download requests and may log access metadata.

Cloudflare Privacy Policy

Vercel

Hosting

TheKitBase is hosted on Vercel. Vercel processes all web requests and may log IP addresses, user agents, and request metadata as part of standard infrastructure operation.

Vercel Privacy Policy

Umami Cloud

Website analytics

We use Umami Cloud to collect privacy-focused, aggregated website analytics on thekitbase.app. When you visit our site, your browser loads a script from cloud.umami.is that sends page view and device metadata to Umami. Umami does not set advertising or cross-site tracking cookies on our site.

Umami Privacy Policy

5. Cookies

TheKitBase does not use advertising cookies or cross-site tracking cookies on thekitbase.app. Our analytics provider, Umami Cloud, does not set cookies in its tracking script on our site. We do not display a separate cookie consent banner for this analytics tool because it does not use non-essential cookies on our pages.

If you proceed to checkout, Dodo Payments may set cookies within their checkout flow. Those cookies are governed by Dodo Payments' privacy policy, not this one.

6. Data Retention

We retain purchase records, order IDs, and license data for as long as necessary to support your license and comply with legal obligations -typically 7 years for financial records under Indian law. Support communications are retained for 2 years. Newsletter subscriptions are retained until you unsubscribe.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access -Request a copy of personal data we hold about you
  • Correction -Request correction of inaccurate or incomplete data
  • Deletion -Request deletion of your data, subject to legal retention requirements
  • Objection -Object to processing based on legitimate interest
  • Withdrawal of consent -Unsubscribe from newsletter communications at any time
  • Data portability -Request your data in a structured, machine-readable format (where applicable)

If you are located in India, you also have rights under the Digital Personal Data Protection Act, 2023 (DPDP Act), including the right to know what data we process, nominate a person to exercise your rights, and grieve any data processing. To exercise any of these rights, email privacy@thekitbase.app.

8. Security

We use industry-standard security measures including HTTPS encryption across all pages, secure payment processing via Dodo Payments (who hold all card data), signed download links for template delivery, and limited access controls on internal systems. No system is 100% secure, but we take reasonable precautions to protect your information.

9. Children's Privacy

TheKitBase is not directed at children under the age of 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us at privacy@thekitbase.app and we will delete it promptly.

10. International Transfers

TheKitBase is based in India. Our service providers (Dodo Payments, Resend, Kit.com, Cloudflare, Vercel, Umami Cloud) may process data in the United States or other jurisdictions. Where data is transferred internationally, we rely on our service providers' own transfer mechanisms and data protection agreements with their customers.

11. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via email to customers. The date at the top of this page reflects the most recent update.

12. Contact

Privacy questions or requests: privacy@thekitbase.app or use our contact form.

Also see our Terms of Service and Refund Policy.