Privacy — draft for review

Staging draft. Business details, retention periods, and legal review are incomplete. This is not an approved policy for live payments.

Information used for your order

The order flow collects your name, email, phone, selections, pickup window, custom answers, and any photos you choose to upload. Home-pickup checkout also asks for an Instagram or Facebook profile, or an explicit no-account choice. Email verification confirms access to that email. Phone numbers and social profiles are not verified.

Who receives information

The selling shop and authorized platform staff can access order information for fulfillment, support, and safety review. Cloudflare supports hosting, bot checks, and image storage; Supabase provides the database; Stripe processes payments and payment-risk information; Resend delivers transactional email. Card details go directly to Stripe. Buyer photos use private storage and access controls.

Access and sharing

Verified buyers receive temporary order access. A shared summary excludes private pickup details, buyer contacts, custom answers, photos, and collection codes. Security checks use limited request information and rate limits. These controls do not establish legal identity or guarantee safety.

Retention and requests — approval needed

Verification codes expire after ten minutes; buyer sessions after 24 hours; shared links after seven days. Expired credentials are cleaned up by scheduled jobs. Retention periods for orders, photos, reports, audit records, backups, and provider records still require approval. The platform legal identity and privacy-request contact must be supplied before publication. No permanent-data deletion promise is made in this draft.

Transactional messages support verification and orders. This flow does not enroll buyers in marketing.