Legal

Privacy Policy

Last updated: October 15, 2026.

Information we collect

• Account details such as name, email address, and password hash.
• Purchase, license, entitlement, and refund records.
• Reviews you publish, which are shown publicly with your first name and last initial.
• Security records: sign-ins, failed sign-in attempts with the IP address they came from (deleted after 30 days), and administrator actions.
• Support messages and information you choose to provide.

How information is used

Information is used to operate accounts, complete purchases, deliver digital access, prevent abuse, provide support, maintain security, and satisfy accounting or legal duties.

Payments

Payments are processed by Komerza (komerza.com) and the payment provider you choose in its checkout, for example Stripe for cards, PayPal, or a cryptocurrency processor. Komerza’s checkout opens in a secure window over our pages, served by Komerza: you enter your payment details there, never on our site. To open it, VIRTUE gives Komerza what you are buying, your order number and, if you used a discount code, a one-time Komerza coupon for that discount; you enter your email address in Komerza’s checkout yourself, for its receipt. Komerza’s checkout also sees the details any payment page sees, such as your IP address and browser. VIRTUE stores your order, Komerza’s payment reference and the payment status, never your card details.

Buying without an account

You can buy with just your email. We keep that email and your order like any other purchase, send your key there, and include a private link to your order. The link’s code is stored only in a scrambled form we can’t read back. If an email we saved at checkout never completes an order, we delete it after 7 days. You can turn your email into an account later by choosing “Forgot password?” and setting a password; your earlier orders will then be in it.

Order emails

When an order is delivered we email you what you bought: your license key (unless we choose to keep keys in your account only) or the next steps. These emails are sent through our email delivery provider, which receives your email address, first name, and the order details needed to send them. We keep a log of these emails for 180 days: the address, the subject, whether it was delivered, and the design and wording it was made from, so we can help if you have a question about an order. The log never holds your license key, and we don’t track opens or clicks.

Cookies and local storage

We use only strictly necessary cookies, which keep you signed in and protect requests. Your bag is saved in your browser’s local storage on this device so it survives a page refresh. We don’t use analytics or advertising cookies.

Fonts in the reseller panel

The menu designer in the reseller panel shows its fonts from Google Fonts. While a reseller has that page open, their browser downloads the font files from Google (fonts.googleapis.com and fonts.gstatic.com), so Google receives their IP address and browser details, as with any download; the page asks the browser not to tell Google which page it came from. No other page of the store loads anything from Google.

Sharing

Data may be shared with contracted hosting, payment, email, fraud-prevention, and support providers only as needed to deliver the service. When an order is paid, a notification with the order number, items, amount, your first name and last initial, your email address and the license key you received is posted to our private Discord staff channel, so we can deliver your purchase and find your order when you contact us.

Retention and rights

We keep personal data only as long as necessary for these purposes and our legal obligations. You may request access, correction, deletion, or export where applicable.

Contact

For privacy requests, reach us through our Discord support server.