Legal
Privacy Policy
Last updated: March 2026
Overview
Off The Clock (“we,” “us,” or “OTC”) respects your privacy. This policy explains what data we collect, why we collect it, and how it is used when you visit offtheclock.co or make a purchase.
Data We Collect
We collect the following categories of personal information:
- Purchase data: Name, email address, and payment information processed via Stripe. OTC does not store payment card details — Stripe handles all card processing under their own security and compliance standards.
- Email subscribers: Email address and content preferences for The Dispatch newsletter, stored in our database (Neon Postgres) and used to send emails via Resend.
- Contact form submissions: Name, email, and message content submitted via the Connect form.
- Usage data: Standard server logs (IP address, browser type, pages visited). We do not use third-party analytics trackers.
How We Use Your Data
- To process and fulfill your order
- To deliver digital downloads via The Logic Vault (authenticated via JWT stored in an HTTP-only cookie)
- To send order confirmation emails and, if subscribed, The Dispatch newsletter
- To respond to contact form inquiries
Third-Party Services
We use the following third-party services that may process your data:
- Stripe — payment processing. See Stripe's Privacy Policy at stripe.com/privacy.
- Resend — transactional and newsletter email delivery. See Resend's Privacy Policy at resend.com/legal/privacy-policy.
- Neon — serverless Postgres database for order and subscriber data. See Neon's Privacy Policy at neon.tech/privacy.
- Vercel — website hosting. See Vercel's Privacy Policy at vercel.com/legal/privacy-policy.
Data Retention
Order records are retained for a minimum of 7 years for accounting purposes. Newsletter subscriber records are retained until you unsubscribe. You may request deletion of your data at any time by contacting us.
Your Rights
You have the right to access, correct, or delete your personal data. To exercise these rights, email us at the address on the Connect page. We will respond within 30 days.
Cookies
We use a single HTTP-only cookie to store your Vault access token after purchase. This cookie is not used for tracking and cannot be accessed by JavaScript. No advertising or analytics cookies are used.
Changes
We may update this policy. Significant changes will be noted on this page with an updated date.