Privacy

NoCut is run from the United Kingdom by its founder, Ahmad. The full company details will be listed here before NoCut takes payments. NoCut is the controller of the data described here, under UK and EU data protection law.

Privacy questions or requests: support@nocutsell.com.

• Waitlist: your email, which form you used, and when.
• Sellers: your email, the name or brand you show buyers, your Stripe account ID and whether it can take payments, your plan status, and the products and files you upload. We never see your card or bank details: Stripe handles them.
• Buyers: the email you give at checkout, what you bought, the amount, and how many times your link was used. Your card details go to Stripe, never to us.
• Everyone: a scrambled, one-way version of your IP address (to stop spam and abuse), and the basic technical logs our host keeps (IP address, browser, pages requested).

NoCut sets one cookie, nocut_session, and only after you sign in as a seller, to keep you signed in. There are no analytics, advertising or tracking cookies, which is why there is no cookie banner.

• To run the service you asked for (our contract with you): sign-in links, your store, checkout, downloads, receipts.
• With your consent: the waitlist. We email you once when NoCut opens. Ask us anytime and we delete your email.
• Our legitimate interests: keeping NoCut secure, stopping fraud and abuse, and fixing problems.
• Legal duties: keeping billing records for the $9 plan.

When you buy from a seller on NoCut, the seller is responsible for your data as their customer, and NoCut handles it on their behalf to deliver your file and receipt. The seller can see your email and your order in their dashboard and in their own Stripe account. For questions about how a seller uses your data, contact the seller, or email us and we will help.

We use a few services to run NoCut. They only use the data to provide their service to us:

• Vercel (USA): hosts the website.
• Supabase (Frankfurt, Germany): stores the database and uploaded files.
• Stripe (USA and Ireland): payments for the $9 plan, and checkout on each seller's own Stripe account.
• Resend (USA): sends sign-in links and receipts.

Where data leaves the UK or EU, these providers protect it with the standard contractual clauses approved for that. We share data with authorities only when the law requires it. We never sell it.

• Waitlist emails: until NoCut opens and we have emailed you, or until you ask us to delete them.
• Sign-in links: they expire after 20 minutes.
• Seller accounts, products and orders: while the account is open, so stores and download links keep working. When a seller deletes their account, we delete them within 30 days.
• Billing records for the $9 plan: 6 years, because UK accounting law requires it.

You can ask us to show you, correct, delete or export your data, or to stop or limit how we use it, and you can withdraw consent at any time. Email support@nocutsell.com and we will reply within a month. If you are unhappy with our answer, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local data protection authority.

Everything travels over HTTPS. The database only accepts our server, uploaded files are private and handed out through links that expire after 2 minutes, and sign-in links work once. No system is perfectly safe, so if something ever goes wrong we will tell the people affected and the regulator as the law requires.

NoCut is not meant for anyone under 18, and sellers must be 18 or over.

If we change this policy in an important way, we will update the date above and email sellers.