Last updated: October 13, 2026
Privacy, in plain words.
This notice covers the Build with GriebZ sales site and Starter Kit payment, delivery and recovery pages on mggriebz.com. The business is Matthew Gene Griebel, doing business as GriebZ Digital Education, in Pipestone, Minnesota. Other linked projects and social platforms may have different practices.
What we collect and why
- Checkout email and purchase records: our delivery service stores your email, order and Stripe session identifiers, payment/access state, the purchased product and edition, and delivery/recovery records. These let us verify a paid order, deliver the correct file, restore access, handle support and provide included revisions of the same kit. We do not copy customer names, billing addresses or card details into these delivery records.
- Payment information: Stripe/Link collects the payment, billing, tax and fraud-prevention information needed for your chosen payment method. Relevant transaction details can be available to us in Stripe's merchant Dashboard for support, accounting and disputes. We do not receive or store your full card number or security code in our delivery application. Saving a payment method with Link is a separate choice with Stripe.
- Session requests: the request form stores your name, email, organization, the session choices you select and your message in our private review queue. It also sends those details to our business inbox so we can reply and plan the session. If we agree on a session, only a plain entry (such as "AI session · Community group", the agreed date and time, format and topics) goes on our calendar; your name, email and message stay private. We do not add requesters to a mailing list.
- Messages you send: if you email us about the kit, privacy or a speaking engagement, we use your address and the information you choose to include to respond. Please do not send card numbers, passwords or identity documents.
- Technical and security information: hosting services may process IP addresses, browser/device information, request times and errors. The API uses an IP-based rate limit to reduce abuse. We use this information to operate and protect the service.
Who helps deliver it
| Provider | Purpose |
|---|---|
| Stripe / Link | Hosted payment, receipts, tax handling and payment security. Their privacy notice explains their own processing and your payment-account choices. |
| Microsoft Azure | Website/API hosting, private storage for kit editions, purchase entitlements and delivery records, session requests and cookieless visit counts. |
| Microsoft 365 | Our business inbox processes support, privacy and speaking messages and attachments you send to our domain email address. |
| Resend | Transactional kit emails and session-request notifications to our business inbox. It processes recipient and reply addresses, email content and delivery metadata; kit emails also include the attached kit and access link. |
| Google / Gmail | Our previous business inbox retains messages sent to its Gmail address. During the transition, new messages may be forwarded to our Microsoft business inbox with a copy kept in Gmail. |
We share information needed for these services, not a customer list for others to market to. Providers may process information outside your state or country. We may also disclose necessary information when legally required or to address fraud, a dispute or a security incident.
Cookies and emails
The delivery pages use essential, secure cookies to connect checkout to your browser and keep a verified reading session. These last up to 24 hours. Email sign-in links work once for 30 minutes. Clearing cookies may require a fresh link from your checkout inbox; knowing an email address alone does not open the kit.
The sales site has no advertising pixels or third-party analytics scripts. It counts visits with our own cookieless measurement: the page, the referring website's name, a rough device type (phone, tablet or desktop), a few button actions (such as opening checkout or sending a session request) and an optional channel label in the link (such as ?src=email). Visits are counted with a salted daily code derived from the connection and browser, which changes every day and is not stored as an IP address. No cookies or browser storage are used for this, and form contents are never included. Its social buttons are ordinary links. Checkout has its own Stripe/Link cookies and privacy choices. A saved HTML kit works offline; choosing an external reference link opens that website under its own policy.
We send purchase delivery, requested recovery and service messages. We may send an included update to this same kit when an approved revision is available. We do not add purchasers to a promotional mailing list. You can turn off kit-update emails in your verified online reader, or email us to stop them. This does not remove download access or prevent requested recovery emails.
How long we keep information
We retain the email-to-purchase association while supporting your included online access and same-kit updates. Order and delivery records are retained as needed for support, security, accounting and legal obligations; they are not used to build marketing profiles. An access link or cookie expiring prevents access but does not automatically erase its stored record.
Session request details are kept in our private request records while we respond, plan and maintain a record of past or confirmed sessions. There is no automatic 90-day deletion. Archiving a request removes it from the open-work list but does not erase its details. You can ask us to delete a request record; we may retain limited information where needed for legal, security or dispute obligations.
You can request deletion of information we no longer need. We may need to retain limited transaction or dispute records for legal obligations. Removing the purchase association can end online recovery and future delivery, but does not remove a file you already downloaded. Stripe and other providers maintain their own retention policies; provider-held account information must also be addressed with that provider.
Your privacy requests
Email DigitalEducation@mggriebz.com to ask what personal information we hold, request a copy, correct it, request deletion, or stop optional update emails. Please identify the request and use your checkout inbox where possible. We will verify ownership before disclosing records or changing access; we do not normally need a government ID.
Depending on your location and applicable law, you may also have rights to restrict or object to processing, withdraw consent where processing relies on consent, obtain a portable copy, and appeal a denied request. Reply to the same email with “Privacy appeal” to ask for review. We respond within applicable legal deadlines and explain any limitation. Exercising privacy rights does not change your downloaded copy or subject you to discriminatory treatment. Minnesota residents can consult the Minnesota Attorney General's privacy-rights guidance or contact that office with a complaint.
Security and children
We use HTTPS, private file storage, restricted service credentials and purchase verification to protect delivery. No online system can guarantee complete security. Keep access links private and contact us if you suspect misuse.
Our checkout and recovery service is not directed to children under 13, and we do not knowingly collect their personal information. A parent or guardian can contact us if a child has supplied information. Classroom or community talks do not require students to give us personal data.
Changes and contact
We update this page and its date when practices change, and provide additional notice where required. Questions: DigitalEducation@mggriebz.com.