How we handle your data.

1. Who we are

This site is operated by DigitGrowth ("we", "us", "our"). We sell CashBox, a guided digital-product builder distributed as a Claude plugin. For privacy questions, contact hello@digitgrowth.io. DigitGrowth is the data controller for personal information collected through this website.

2. What we collect

Information you provide

• Support and inquiry messages. If you email us or message us on WhatsApp, we receive whatever you send (typically name, email or phone number, and the content of your message).
• Purchase details. When you buy CashBox, the checkout is handled by Whop. After payment, Whop forwards order metadata to our confirmation page — typically order ID, email, first/last name, currency, and amount. We do not see or store your card details; payment data is held by Whop and its processors.

Information collected automatically

• Device and request data. IP address, user-agent string, referrer URL, pages viewed, timestamps. Used for security, debugging, and basic analytics.
• Cookies and similar identifiers. See §6 for the full list and purpose of each.

3. How we use it

• To process and confirm your purchase, and to deliver the product you bought.
• To respond to support requests and questions you send us.
• To measure the performance of our advertising (which ads led to visits and purchases).
• To keep the site secure, prevent fraud, and diagnose technical issues.
• To comply with legal obligations such as tax recordkeeping.

4. Legal basis for processing

CashBox is offered to customers in the United States. We rely on the following bases:

• Contract — for handling and confirming your purchase, and for any direct support you request.
• Legitimate interests — for advertising measurement, essential site operation, fraud prevention, security logs, and basic aggregate traffic understanding.
• Legal obligation — to retain transaction records for tax and accounting purposes.

5. Who we share it with

We do not sell your personal information. We share limited data with the following providers strictly so they can perform a service for us:

• Whop — checkout, payment processing, and order fulfillment. Whop receives the information you enter at checkout. When you click a Buy button, we also attach your anonymous site identifier (cb_xid), Meta advertising cookies (_fbp, _fbc), IP address, and user-agent string to the Whop checkout session as metadata, so that after a successful purchase we can attribute it back to the original ad click for measurement (see §6 and "How we use it"). See Whop's privacy policy.
• Vercel — website hosting and edge networking. Receives request data (IP, user-agent, URL) needed to serve the page. See Vercel's privacy policy.
• Meta Platforms (Facebook) — measures whether an ad led to a visit or purchase via the Meta Pixel and Conversions API. See Meta's privacy policy.
• Anthropic — the CashBox plugin runs inside Claude. Anything you type into Claude while using the plugin is processed by Anthropic under its terms and privacy policy. We do not receive that conversation content. See Anthropic's privacy policy.

We may also disclose information when required by law, to enforce our terms, or to protect the rights, property, or safety of any person.

6. Cookies and tracking

We use a small set of cookies and similar identifiers to measure advertising performance and operate the site. They are set on first visit.

Opting out

To opt out of advertising measurement, clear cookies for this site in your browser settings, install a tracking-blocker extension, or email hello@digitgrowth.io and we'll honor the request manually. You can also opt out of personalized advertising directly on Meta.

7. International data transfers

Our providers — Vercel, Meta, Whop, and Anthropic — are based in the United States and may process data outside your country of residence. Where required, transfers from the EU, UK, or EEA rely on the European Commission's Standard Contractual Clauses or equivalent safeguards put in place by each provider.

8. How long we keep it

• Order and tax records — up to 7 years, as required by tax law in our jurisdiction.
• Support correspondence — up to 2 years after the last message in the thread.
• Cookies — as listed in §6.
• Server and security logs — typically 30–90 days.

9. Your rights

Depending on where you live, you have some or all of the following rights:

• Access a copy of the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Delete data we no longer need to keep (subject to legal retention obligations).
• Restrict or object to certain kinds of processing.
• Portability — receive your data in a structured, machine-readable format.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your national or state supervisory authority. In the UK that's the ICO (ico.org.uk); in the EU it's the data protection authority of your country.

California residents (CCPA/CPRA): you have the right to know what personal information we collect about you, to delete it, to correct it, and to opt out of "sale" or "sharing" for cross-context behavioral advertising. We treat the Meta Pixel as "sharing" under the CPRA. To opt out, follow the steps in §6 or email us directly.

To exercise any right, email hello@digitgrowth.io from the address associated with your account or order. We may ask for a small amount of additional information to verify your identity. We'll respond within 30 days (or 45 days for CCPA requests, with notice).

10. Security

We use HTTPS site-wide, scoped session cookies, and standard infrastructure security from our hosting and payment providers. No system is perfect — if you suspect your information has been compromised, tell us immediately at hello@digitgrowth.io.

11. Children

CashBox is not directed at people under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we'll delete it.

12. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent change. For material changes — for example, a new third-party processor or a new category of data — we'll surface a notice on the site before the change takes effect.