Policies & Terms

Depending on how you use the service, we process:

• Account information such as email, profile name, account ID, and authentication state.
• Order and fulfillment information such as delivery email, products, quantity, price, currency, discounts, status, and delivery records.
• Payment method, provider confirmation, transaction references, status, and dispute or refund records. We do not store full card numbers or card security codes.
• Fraud and security signals such as IP address, country, user agent, device/browser/OS, screen and timezone data, network/location/ISP signals, pseudonymous fingerprints, risk scores, reasons, and review outcomes.
• Support and request data such as ticket subject, category, messages, linked order or account, guest email, read state, attachments, requested product, notes, and references.
• Contact or review details you submit, including name/email, message, rating, and text.

We use this information to operate accounts; create, verify, fulfill, and support orders; process payments, refunds, and disputes; respond to messages and product requests; prevent fraud and abuse; secure and troubleshoot the service; meet accounting or legal obligations; and improve the product through optional, limited analytics.

External payments may be handled by PayPal, Cryptomus, Authorize.net, Dodo Payments, or PayTree, depending on which methods are enabled and selected. Accountslayer wallet/store credit is handled internally. Payment providers collect payment credentials under their own notices; we receive the confirmation, identifiers, method, amount, status, and risk or dispute details needed to complete and reconcile the order.

We use Supabase for database, authentication, and storage; Vercel for hosting and edge services; Resend for transactional email; PostHog for optional product analytics; iplocate.io for IP geolocation and proxy/VPN detection used in order fraud checks; and OpenRouter plus the selected model provider when AI-assisted support is enabled. Authorized staff and providers receive only the information needed for their role. We may also disclose information when required by law or to protect users, the service, or our rights.

Browser analytics is disabled by default. If you enable it, PostHog receives a small allowlist of product events with a temporary in-memory browser identifier. We disable automatic pageviews, click/form capture, person profiles, session replay, exception capture, and external analytics extensions. We do not send raw searches, coupon codes, email, support text, order/ticket IDs, access tokens, payment secrets, attachment links, or full URLs. Completed purchases may emit an aggregate event without customer or order identity. Operational errors are recorded through our hosting platform with a no-PII sanitizer and are not sent to a third-party error-tracking provider.

We use device, network, order, and payment signals to assess fraud and abuse. A check may allow, deny, or hold an order for review. Where applicable law provides rights concerning profiling or automated decisions, contact support to request information or human review.

When our support AI assistant is enabled, a size-limited excerpt of recent support-ticket text may be processed through OpenRouter and the selected AI model provider. We automatically redact common passwords, access tokens, payment-card details, product keys, and contact details where detected before sending the excerpt. Automated redaction cannot guarantee detection of every sensitive value, so please do not include secrets or full payment details in support messages. AI suggestions are reviewed by staff and are never sent to customers automatically.

We keep information only as long as needed for the purposes above, including fulfillment, support, accounting, fraud prevention, disputes, security investigations, and legal obligations. Retention differs by record type and provider. Our production target limits optional PostHog analytics to 90 days. We use access controls, encryption for designated sensitive records, and logging safeguards, but no online service can guarantee absolute security.

You can disable optional browser analytics above at any time. Depending on your location, you may have rights to be informed, access, correct, delete, restrict, object, obtain a portable copy, withdraw consent, or request human review of certain automated decisions. Submit a request through our contact or support channels. We may need to verify your identity and may retain information where law, accounting, fraud, dispute, or security obligations require it. You may also contact the data-protection authority available in your jurisdiction.

The version and effective date appear above. For a material change, we will use a site, account, or email notice as appropriate before it takes effect. Questions or privacy requests can be submitted through the Contact page or an existing support ticket.