Last updated: 9 November 2026
Dinom ("we", "us") runs this support portal for our themes. We keep the amount of data we collect small and use it only to run your account and help you. We do not sell your data and we do not show ads.
1. What we collect
Data you give us
- Account: your name, email address and password. The password is stored only as a one-way hash, so nobody on our team can read it.
- Purchase details: the Envato purchase code you enter. We keep it encrypted. We also store the item name, license type, purchase date, support end date and the Envato username of the buyer that Envato returns for the code.
- Tickets: the subject and messages you write, any files you attach, and details such as ticket status, the replies from our team and your rating of the support you got.
Data collected automatically
- Session data: to keep you signed in we store a session that includes your IP address, your browser's user-agent text and the time of your last activity.
- Security logs: your IP address is used to limit repeated sign-in attempts and other abuse.
We do not use analytics or advertising trackers. Our fonts are served from this site, not from a third party.
2. Why we use it
| Purpose | Data | Basis |
|---|---|---|
| Create and secure your account | Name, email, password, session data | Contract |
| Confirm your purchase and support period | Purchase code and Envato purchase details | Contract |
| Answer your tickets | Ticket content, attachments, account details | Contract |
| Send you emails about your account and tickets | Name, email, ticket details | Contract |
| Prevent abuse and keep the Service safe | IP address, session data | Legitimate interest |
| Improve our themes and documentation | The questions you ask | Legitimate interest |
In plain words: we use your data to do what you asked us to do, and to keep the Service safe.
3. Cookies
We use only the cookies the site needs to work:
- a session cookie, which keeps you signed in and ends after a period of inactivity;
- a security (CSRF) cookie, which protects forms from being submitted by other sites;
- a "remember me" cookie, set only if you tick "Keep me signed in".
These are essential, so there is no cookie banner to accept. We set no tracking or advertising cookies.
4. Emails
We email you when your ticket gets a reply, when you ask to reset your password and for similar account messages. We do not send marketing emails from this Service.
5. Who we share data with
- Envato: we send your purchase code to Envato to check your purchase. Envato's own privacy policy applies to how it handles it.
- Service providers: companies that host the Service and deliver our emails, only so they can do that work for us.
- Our support team: the people who answer tickets can see your name, email, purchase details, tickets and attachments.
- Authorities: if the law requires it, or to protect our rights and users from fraud or abuse.
We do not sell or rent your personal data.
6. Where data is kept
Our servers, or our providers' servers, may be in a different country from yours. When that happens we only use providers that protect personal data to a suitable standard.
7. How long we keep it
- Your account, purchases, tickets and attachments are kept while your account exists, so you can look back at old answers.
- If you delete your account from your profile page, your account, linked purchases, tickets, replies and uploaded files are deleted. Copies in backups are removed as the backups are replaced in their normal cycle.
- Sign-in sessions expire after a period of inactivity.
- We may keep a small record where the law requires it, or where we need it to deal with abuse or a dispute.
8. How we protect it
- Passwords are hashed and purchase codes are encrypted.
- Attachments are stored privately and can only be opened by you and our support team.
- Access to the admin area is limited to our staff, and the site is served over HTTPS.
No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.
9. Your choices and rights
Depending on where you live (for example under the EU and UK GDPR or India's Digital Personal Data Protection Act, 2023) you may have the right to:
- see the personal data we hold about you and get a copy;
- correct data that is wrong (you can change your name, email and password on your profile page);
- delete your data (you can delete your account on your profile page);
- object to or limit some uses of your data, or withdraw consent you gave;
- complain to your local data protection authority.
To use a right that you cannot use yourself on the site, write to mailtodinom@gmail.com. We may need to confirm it is you first, and we will reply within a reasonable time, usually within 30 days.
10. Children
The Service is not meant for anyone under 16. We do not knowingly collect data from children. If you think a child has given us data, write to us and we will delete it.
11. Changes to this policy
We may update this policy. The date at the top shows the latest version. If a change matters, we will tell you by email or on the site.
12. Contact
For any privacy question, or to use your rights, write to mailtodinom@gmail.com.