Privacy Policy

EdenStream is operated by EdenStream Media from Karoi, Zimbabwe, and respects your privacy. This policy explains what we collect, why we collect it, and the rights you have under the Zimbabwe Data Protection Act [Chapter 10:37] and applicable law. “We” / “our” means the Operator.

1. What we collect

• Account and waitlist information: your name, email address, and the role you select (viewer / creator / advertiser) when you join the waitlist or create an account.
• Survey responses: the answers you give in the creator survey (role, frustrations, preferences on commissions and Sabbath features). These are used in aggregate to shape the product.
• Purchase records: your email, the product purchased, the amount, currency, and a payment reference, when you buy from the Marketplace or rent from the Upper Room.
• Usage information: basic, aggregated usage data (such as pages viewed and device type) processed by our hosting provider for security and reliability. We do not build advertising profiles.
• Communications: anything you send us through the Contact link or in correspondence.

2. How we use your information

• To operate the Service: manage the waitlist, process sign-ups, deliver purchases via secure download links, and keep counters that inform the platform’s roadmap.
• To process payments. Card payments are handled entirely by Stripe; we never see or store your full card number.
• To notify you, if you opt in, about the platform’s progress (we will not add you to mailing lists without consent).
• To comply with legal obligations, including tax and accounting record-keeping.

3. What we do not do

• We do not sell, rent, or trade your personal information.
• We do not run third-party advertising networks or track you across other websites for ad targeting.
• We do not require an account to browse the Service.

4. Where your information is stored

• Cloudflare: the Service runs on Cloudflare infrastructure (Pages, Workers, D1 database in the EU-West region, R2 object storage). Cloudflare’s processing is governed by its Data Processing Addendum.
• Stripe: payment data is processed and stored by Stripe under Stripe’s privacy policy.
• Google Drive: encrypted backups of project files are kept in a private Google Drive account controlled by the Operator. These contain product files and platform documents, not waitlist or payment data.

5. How long we keep information

• Waitlist and survey data: until you ask us to delete it, or 24 months after your last interaction, whichever is sooner.
• Purchase records: retained for at least 7 years to meet tax and accounting requirements under Zimbabwean law.
• Backups: retained per our backup rotation and deleted automatically when they age out.

6. Your rights (Zimbabwe Data Protection Act)

You have the right to:

• Access the personal data we hold about you;
• Correct inaccurate data;
• Delete your data (subject to legal retention requirements);
• Object to processing for specific purposes.

To exercise any of these rights, use the Contact link on the site or write to the Operator, EdenStream Media, Karoi, Zimbabwe. We will respond within 30 days. If you are not satisfied, you may complain to the Data Protection Authority of Zimbabwe.

7. Children

The Service is designed for audiences of all ages, but we do not knowingly collect personal information from children under 16 without the consent of a parent or guardian. If you believe a child has provided us personal information, contact us and we will delete it.

8. Cookies and local storage

We use browser local storage only for interface preferences (such as your last screen and the Sabbath demo toggle). We do not use third-party advertising or tracking cookies. Cloudflare may set security cookies necessary for the safe operation of the Service.

9. Security

We protect your data with: encryption in transit (HTTPS), signed and expiring download links for purchased files, access controls on administrative systems, and the security features of our hosting providers. No method of transmission is 100% secure, but we take reasonable measures appropriate to the risk.

10. International transfers

Your data may be processed on Cloudflare and Stripe infrastructure located outside Zimbabwe (including the United States and the European Union). By using the Service you consent to this processing, which is protected by the providers’ contractual and technical safeguards.

11. Changes to this policy

We may update this policy as the Service evolves. Material changes will be posted on this page with a new “Last updated” date and, where practicable, announced on the Service 14 days before they take effect.

12. Contact

Privacy questions or requests: use the Contact link on the site, or write to the Operator, EdenStream Media, Karoi, Zimbabwe.