OASSE purchase document.

# OASSE Policy Pack Purchase Privacy Notice

Version 2026-10-06.3. Prepared for operating and legal acceptance before publication. This notice covers the policy-pack purchase and delivery service, not every other OASSE service.

## Information and purposes

Stripe collects checkout and payment information. OASSE receives the checkout identifiers and buyer details needed to verify payment, identify the purchased SKU and release, deliver access, provide support, reconcile payments, address disputes and keep transaction records. These may include name, email, billing location, Stripe customer, session and payment identifiers, amounts, tax, purchase selection and the recorded agreement action. Full card numbers and card security codes are handled by Stripe and are not stored in the OASSE merchant database.

The merchant service records document versions and checksums, timestamps, order status, authorized software transfer events and delivery-provider acknowledgments. A private email link is an access credential and should not be shared. Hosting, reverse-proxy and payment providers may keep their own operational and security logs, including network identifiers. The checkout uses browser session storage for a retry key to avoid duplicate orders; this does not create a marketing profile. The policy-pack merchant implementation adds no advertising tracker and does not enroll buyers in marketing merely through a purchase.

## Providers and disclosures

Stripe processes payments and checkout under its own applicable terms and privacy notice at https://stripe.com/privacy. OASSE's configured email delivery provider processes the address and purchase email to send access links; the prepared delivery adapter uses Resend, whose privacy notice is at https://resend.com/legal/privacy-policy. The configured hosting provider processes the merchant application and operational data. OASSE may disclose relevant transaction information to service providers, professional advisers, payment networks or authorities where needed to operate the purchase, investigate abuse, address a dispute or meet legal obligations. Purchase information is not sold or used by this service for behavioral advertising.

## Retention and security

OASSE retains transaction, consent and fulfillment records for the period needed to provide purchase access, maintain accounting records, meet legal obligations and resolve disputes. Access is limited to authorized operators; the prepared merchant uses private storage and expiring download credentials. Records subject to a legal hold may be retained longer. This notice does not promise absolute security or deletion of accounting records on demand. Before activation, OASSE's responsible operator must adopt and maintain the applicable retention schedule and backup practices.

## Requests and sensitive data

Contact Contact@oakandsparrowsystemsenterprise.io to request access to, correction of or deletion of purchase information, or to ask about privacy rights available under applicable law. OASSE may verify your identity and retain records where a lawful exception applies. The standalone software runs in your own system; buying it does not upload your operational data to OASSE. Do not send protected health information, student records, credentials, card information or other sensitive production data in support requests. A separate agreement is required before any engagement that involves OASSE processing protected customer data.

## Scope and changes

This purchase service is intended for authorized adult business purchasers. Links to other services are governed by their respective notices. The privacy version shown for the purchase is preserved with its record. A later notice will describe material changes to the service's practices, subject to applicable notice requirements.