Effective: 2026-05-07

Privacy Policy

What data we collect

When you purchase the Niche Atlas dataset, we collect:

• Your email address (for delivery of the dataset and for refund / support communication)
• The country you provide at checkout (for VAT / sales tax purposes)
• The date and amount of your purchase

We do not collect:

• Your name (unless you provide it voluntarily)
• Your address
• Your IP address (Gumroad may log this for fraud prevention; we don't access it)
• Any browsing or usage data about how you use the dataset

Who processes your data

Gumroad is the merchant of record for all purchases. They handle payment processing, tax collection, and basic customer data storage. Their privacy policy applies to all transactional data: gumroad.com/privacy

We act as the dataset publisher and access only:

• Your email address (to fulfill delivery and support)
• Country / sales aggregates (for our own analytics, never identifiable beyond email)

Where the data lives

• Gumroad's infrastructure (US, EU)
• Our email inbox (Google Workspace, EU region)

How long we keep it

• Email and purchase record: 6 years (Spanish tax law requirement for invoices)
• Support correspondence: until 1 year after the last contact, then deleted

Your rights (GDPR)

If you are in the EU, EEA, or UK, you have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion (after the 6-year tax retention period)
• Object to processing
• Data portability

To exercise any of these rights, email hello@nicheatlas.net from the address used for purchase. We respond within 30 days.

Data sharing

We do not sell, rent, or share your data with third parties for marketing or advertising. We share data only:

• With Gumroad (already implicit in the purchase)
• If required by law (court order, tax inspection)

Cookies

The product website uses no tracking cookies. Gumroad's checkout page may use technical cookies for the payment flow — see Gumroad's privacy policy.

Email marketing

If you purchase, you may receive at most one follow-up email within 90 days announcing v2 of the dataset. You can opt out by replying with "no updates". We do not run a newsletter.

Children

The dataset is intended for adults engaged in business activity. We do not knowingly collect data from children under 16.

Changes

If we update this policy materially, we will notify purchasers via email and post the change on the product page.

Data controller

The data controller for the purchase follow-up email and support correspondence is the individual operating Niche Atlas, based in Spain. Contact: hello@nicheatlas.net. For purchases, Gumroad acts as merchant of record and is the controller of payment and checkout data; for the email follow-up described above, Niche Atlas is the controller.

Supervisory authority

If you are in the EU, you have the right to lodge a complaint with a data protection authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD) — www.aepd.es.