Last updated: October 22, 2026
Xact90 makes edge-sanding guides for specific sanders. It’s run by me, Patrick Campanale, as a DBA of Campanale LLC in Tennessee. I want this policy to be as clear and readable as the rest of the site, so here’s what I collect, why I collect it, and what you can ask me to do with it.
The short version: I collect what I need to run the shop, ship your order, deliver your files, and answer your emails. I don’t run analytics or advertising trackers on this site, and I don’t sell your information.
What I collect and why
Orders and downloads
When you buy something, WooCommerce stores your name, email address, billing address, and shipping address. I use that to process your order, ship it, deliver any files, answer questions about your order, and keep the business and tax records I’m required to keep.
Payment information
Payments are handled by the payment processor you choose at checkout. Your card number goes straight to them, and this site never sees or stores it. I get confirmation that you paid, along with limited details like the type of payment and the last four digits of a card.
Accounts
If you create an account, I store your name, email address, and a securely hashed password, along with your order history and download access, so you can track orders and download your files again.
Download records
When you download a file, WooCommerce records the time and your IP address with that order. That helps me confirm a file was delivered and spot download links that are being shared or abused.
Product reviews
If you leave a product review, I store the name, email address, rating, and review text you submit, plus your IP address and browser details to help catch spam. Your name, rating, and review are shown publicly. Your email address never is.
The reviews archive also keeps reviews that customers originally left through Judge.me on the earlier Xact90 store, with their original names, dates, and text.
Launch notifications and updates
While orders are closed, you can leave your email address to hear when they open. I store that address, the product you signed up from (if any), the sander you tell me you own (if you do), the page you signed up on, and the date. I use it to tell you when orders open for what you asked about, and I may also send occasional Xact90 updates. Every email will include a way to unsubscribe, or you can email me and I’ll delete your address.
Emails you send me
Apart from the launch-notification signup, there’s no contact form on the site. If you email me at [email protected], I keep your message and email address so I can reply and follow up on your order or question.
Order and account emails
The site sends order confirmations, download links, shipping updates, and password resets through an email delivery service. Apart from updates to people who sign up for them, I don’t send marketing email.
Website interactions
Like most websites, the server and Cloudflare log technical details about each visit, like your IP address, browser type, the page you asked for, and the time. I use those logs to keep the site secure, block abuse (including repeated failed sign-in attempts), and fix problems. I don’t use them to build a profile of you.
Cookies
The site only uses cookies it needs to work. WordPress and WooCommerce use them to keep you signed in and remember your cart and checkout. Cloudflare may set a security cookie to tell people apart from bots, and your payment processor may set its own cookies on the cart and checkout pages to process payments and prevent fraud. There are no analytics or advertising cookies.
Links to other sites
Some pages link to other websites, like Created Workshop or a tool maker’s site. Once you follow a link, that site’s privacy policy applies.
When I share your information
I only share what each service needs to do its job:
- Your payment processor to process payments and refunds.
- My email delivery service to send order and account emails.
- Cloudflare for security, DNS, and delivering the site quickly.
- Shipping carriers get your name and shipping address when I ship your order.
- Accountants, legal advisors, or government agencies when the law requires it or I need help meeting a legal obligation.
I never sell your personal information.
Your rights with your information
You can ask me to send you a copy of the personal information I have about you, correct anything that’s wrong, or delete your account and personal information. The one exception is records I’m legally required to keep, like completed orders. Depending on where you live, you may have additional rights under your local privacy laws, and I’ll honor those too.
Email [email protected] and I’ll respond within 30 days. I may need to confirm you own the email address on the account before I act on a request.
How I secure your data
The whole site runs over HTTPS. Card details stay with the payment processor, and purchased files sit in protected storage that only works through your order’s download link. No system is perfectly secure, but I take keeping your information safe seriously.
How long I keep it
- Orders: seven years, for tax and accounting records.
- Accounts: until you ask me to delete your account.
- Email signups: until you unsubscribe or ask me to delete yours.
- Reviews: as long as they’re published, or until you ask me to remove yours.
- Emails: as long as they’re useful for a conversation or order, or until you ask me to delete them.
- Server and security logs: a short period, generally no more than 30 days.
- Backups: the site is backed up daily so I can recover from a problem. Those backups roll over on a regular schedule and aren’t used for anything else.
Where the site and data live
The site runs on WordPress and WooCommerce on a cloud server in the United States that I manage. If you visit from outside the U.S., your information is handled here.
Children
The site isn’t meant for children, and I don’t knowingly collect information from anyone under 13. If I find out I have, I’ll delete it.
Changes and questions
If I change this policy in a way that matters, I’ll update the date at the top of this page. If you have any questions, just email me at [email protected].
Adapted from the Basecamp open-source policies / CC BY 4.0