Fable UI Privacy Notice
Effective date: 2026-11-01. Controller/operator: Fable UI, trading as Fable UI. Privacy contact info@higginsd.com; business contact/address Fable UI is operated by Higgins Digital, Charlotte, NC, USA.
Information and purposes
We collect purchaser/licensee name, email, order items, payment status, processor identifiers and transaction totals to quote, charge, fulfill and support purchases. Stripe processes card details; Fable UI does not store full card numbers or card security codes. Account/authentication records allow verified order access and recovery. Contact messages contain information you submit; do not send card details, passwords or unrelated sensitive information. We retain acceptance evidence such as agreement versions/content hashes, exact checkbox text, server timestamp and order/quote association to document the purchase agreement and licensed scope. Limited request/security data, which may include IP address, user agent, sign-in events, delivery events and download activity, supports fraud prevention and system security. We minimize this data and restrict access. We do not claim that retained evidence is anonymous.
Browser storage
Necessary cookies and similar storage support sessions, security and cart persistence. These are described in the Cookies Notice. Fable UI uses no advertising pixels and no optional behavioral analytics. If that changes we will update this notice and provide any required choices first.
Sharing and service providers
Relevant data is disclosed to actual payment, hosting/database/authentication, private file-storage and transactional-email providers as needed to provide the service, subject to their roles and agreements. Current providers: Vercel, Supabase, Stripe, Resend. We may disclose information to professional advisers, in a lawful business transfer with appropriate safeguards, to comply with valid legal obligations, or to protect rights/security where legally justified. We do not publish customer purchase/download records or place them in public source code. We do not sell personal information or share it for cross-context behavioral advertising.
Legal bases where applicable
Depending on jurisdiction, processing may be necessary to perform the purchase contract, comply with legal/accounting obligations, pursue legitimate and proportionate security/rights-protection interests, or rely on consent for optional purposes. A generic purchase checkbox is not consent to every use of data. Where we rely on consent you can withdraw it at any time; optional marketing is never a condition of digital delivery.
Retention
Retain records only for a legitimate documented purpose. Retention schedule: transaction/accounting and necessary agreement evidence up to seven years; closed support tickets up to two years; routine security/request logs about 30 days; short-lived access tokens until expiry/revocation and minimal audit retention. Legal holds, disputes, fraud investigations or statutory periods may require different retention. Where feasible, redact or aggregate unnecessary raw identifiers sooner. Account deletion does not require erasing legally necessary payment/legal records; explain what remains and why.
Security and transfers
Use access controls, private storage, secure transport and appropriate operational safeguards. No internet system is perfectly secure; we do not promise absolute protection. Cross-border processing may occur through actual providers; identify relevant processing locations and legally required transfer measures for supported markets rather than asserting that standard clauses alone solve every case.
Your choices and requests
Contact the verified privacy address to request access, correction, deletion or other rights applicable to your location. We may verify identity proportionately, explain legitimate exceptions and retain necessary records. Response deadlines and appeal or regulator rights depend on applicable law. No fee or denial is imposed merely for exercising a protected right. Marketing unsubscribe is separate from necessary order/security messages. Fable UI does not use advertising or behavioral analytics, so browser preference signals do not change our processing today.
Children and changes
The service is intended for adults with contracting capacity and is not directed to children under 13. If we learn we collected children's information contrary to applicable law, we will take appropriate steps. We update this notice when our practices change, give required notices and obtain new consent where required. Historical versions remain available. This notice describes data practices; it does not waive statutory privacy rights or turn all processing into a contractual consent.