Privacy Policy

1. Information We Collect

We collect information you provide directly and information generated as you use the Site:

• Account information — email address and password when you create an account (stored securely via Supabase Auth).
• Order information — name, shipping address, and order details when you place an order.
• Payment information — credit card and billing details processed by Stripe. We never see or store your raw card numbers.
• Design data — custom design files and configurations you create in our editor.
• Usage data — pages visited, browser type, and approximate location via standard server logs.

2. How We Use Your Information

• To process and fulfill your orders
• To send order confirmation and shipping notification emails
• To provide customer support
• To improve the Site and our products
• To comply with legal obligations

We do not sell your personal information to third parties.

3. Third-Party Services

We use the following third-party services to operate the Site. Each has its own privacy policy:

• Supabase — authentication and database hosting.
• Stripe — payment processing. Your payment data is governed by Stripe’s Privacy Policy.
• Resend — transactional email delivery (order confirmations, shipping updates).

4. Cookies

We use session cookies to keep you logged in and to persist your cart between visits. We do not use third-party advertising cookies or tracking pixels. You can disable cookies in your browser settings, but some Site features may not work correctly without them.

5. Data Retention & Security

We retain your account and order data for as long as your account is active or as required for tax and legal purposes. We use industry-standard security practices including encrypted connections (HTTPS) and secure credential storage. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your data.

6. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by emailing us. We will respond within 30 days. If you are a California resident, you have additional rights under the CCPA including the right to know what data we hold and to opt out of any sale (we do not sell data).

7. Contact

Privacy questions or requests? Email hello@spicylazer.com.