DRAFT · LEGAL REVIEW REQUIRED

Privacy policy

This is a development placeholder. The data controller, applicable legal basis, service regions, retention periods, and contact method must be finalized before launch.

Account and business information

The application stores account identity, verified email, business details, page content, and uploaded files. Supabase provides authentication and the database. Cloudflare R2 stores private objects. Resend sends transactional email. Stripe processes payments; the application stores Stripe identifiers and subscription state, rather than card details.

Consultations and customer support

Consultation requests store the contact information, business goals, availability and contact consent you provide. Authorized platform administrators can review requests and manage customer pages and files to provide support. Administrator access and changes are recorded in an audit log. Private checkout invitations are tied to the consultation purchasing email.

Public content and private files

Published business pages and files explicitly marked public can be accessed by visitors. Owner-only files require account authorization. Public files are delivered through controlled application URLs while the storefront remains published and entitled.

Files marked public are sent to Bouncer for malware scanning before distribution. Bouncer processes data on AWS in Mumbai, India, and its terms allow uploaded files to be retained for up to 24 hours. Scan metadata is retained while the account is active. Owner-only files are not queued for these checks. Read Bouncer’s privacy policy for information about its processing.

Analytics and essential sessions

The application records basic page visits and link clicks using daily counters. These counts are approximate and are not unique visitor counts. Authentication uses essential session cookies. Rate limiting uses short-lived hashed request identifiers. No advertising profile or cross-site tracking system is included.

Retention, export, and deletion

Suspended storefront data is retained. A configured retention policy and an account deletion process are required before launch. Owners can export supported business data through their dashboard, including while billing access is suspended.

Before launch

Document the legal entity, support contact, processor agreements, international transfers, security response procedure, user rights, backup retention, and deletion timelines with qualified legal review.