01. Scope
This policy describes how Harrow & Vane AES Limited Liability Company handles payment-related information and supplements our Privacy Policy and Terms of Service.
02. Payment providers
Transactions may be processed by authorized providers such as Lemon Squeezy or Stripe, where those services are actually enabled. The provider and any merchant-of-record arrangement are identified by the specific checkout. A merchant of record may independently administer payment authorization, taxes, invoices and refunds under its terms.
03. Information handled
Processors may collect cardholder name, billing address, card details and authentication information. We may receive transaction identifiers, payment status, purchase amount, billing contact information and masked payment-method details. Do not send complete card numbers or security codes by ordinary email.
04. Card storage and security
We intend to use approved processors for card collection and storage. We do not intentionally retain card verification codes after authorization. Tokenized payment references may support authorized recurring billing. Actual PCI DSS responsibilities depend on our integrations and cannot be assumed to be eliminated by outsourcing processing.
05. Authorization and subscriptions
Completing checkout authorizes the displayed charge. A recurring subscription additionally authorizes renewal charges under the disclosed billing schedule until cancellation or termination. An initial purchase does not authorize unrelated charges.
06. Refunds, disputes and fraud
Refund eligibility follows product-specific checkout disclosures and applicable law. Transaction records may be shared with processors or financial institutions to investigate disputes, chargebacks or suspected fraud. Fraud controls may include verification, monitoring and temporary restrictions.
07. Retention and research separation
We retain financial records for legitimate accounting, tax, legal, fraud-prevention and dispute purposes, then dispose of them as appropriate. Purchase data is not automatically used for research or AI training.
08. Incidents, updates and contact
We investigate suspected payment-data incidents and notify affected parties where required by law or contract. This policy may change as processing arrangements change. Billing and security questions should be sent to the designated support contact on our website.