Privacy Policy

When you buy something

• What you bought, when, and what you paid — kept as the sales record tax law requires.
• Your name, email address and phone number, if you give them at the counter or ask for a receipt by email or text.
• Card payments are handled by Stripe. Your card number never reaches this store's systems; only a reference to the payment and the last four digits are kept.

Who else sees it

Only the services that make this store run, each processing your data solely to provide their service:

• Supabase, Inc. — database, authentication and file storage. Everything the product stores.
• Vercel, Inc. — application hosting, delivery and custom-domain provisioning. Requests in transit; server logs; custom domain names.
• Stripe, Inc. — subscription billing, and card payments for stores that use it. Billing contact and card details — card numbers never reach us; customer name and email on a saved card.
• Resend, Inc. — transactional and marketing email, and inbound email relay. Recipient address, message content, delivery and bounce events.
• Telnyx LLC — text messages — receipts, booking notices, replies — on the platform's account, and 10dlc registration. Recipient number, message content, the store's business details for carrier registration.
• United Parcel Service of America, Inc. (UPS) — ups shipping rates and labels. The shopper's name, delivery address and phone, and the size and weight of the parcels; the store's own ship-from address and account number.
• FedEx Corporation — fedex shipping rates and labels. The shopper's name, delivery address and phone, and the size and weight of the parcels; the store's own ship-from address and account number.
• United States Postal Service — usps shipping rates and labels. The shopper's name, delivery address and phone, and the size and weight of the parcels; the store's own ship-from address and account number.
• Anthropic, PBC — language models: drafting waivers, event copy, web pages and marketing text; summarising and suggesting replies in the sms inbox; the review digest; reading uploaded photos and supplier documents; the back-office assistant; reading competitors' public websites (its web search and fetch tools) and writing business plans. The text and images handed to it for the task — which can include SMS transcripts with customer names and numbers, review text with reviewer names, uploaded images, supplier invoices and price lists, the store data needed to answer a question, and for competition & planning the store's monthly revenue, occupancy, labour and spending totals and competitors' website addresses.
• OpenAI, L.L.C. — language models (the alternative provider for the same features), embeddings for the knowledge base, and image generation. The same categories as Anthropic when chosen as the provider; knowledge-base text for embeddings; prompts and source images for generated pictures.
• OpenRouter, Inc. — routing image and video generation to third-party models. Prompts and source images — property photographs, product photographs — for the map illustrator and the video studio.
• ElevenLabs Inc. — voice: narration for videos and the phone agent, including cloned voices. The text spoken; voice samples a staff member records for cloning, deleted from our storage once the clone exists.
• Google LLC — business profile (reviews and replies, listing fields, posts, photos, performance), analytics, google ads, drive imports, sign-in with google, and the places api for finding nearby competitors. Review text and reviewer names read from Business Profile; the replies, posts, listing fields and photos a staff member chooses to send to it; site analytics; campaign settings and spend; files a staff member chooses to import; the email on a Google sign-in; the store's address or coordinates and search terms for a competitor scan.
• Apple Inc. — sign in with apple, for the customer portal. The email (or Apple relay address) on the sign-in.
• Verisign, Inc. (RDAP) — checking a custom domain's registration and expiry. The domain name only.

How long we keep it

Sales records for as long as tax law requires. Signed waivers for as long as a claim could be brought. Messages we sent you and the log of what happened on your account for up to two years. Everything else until you ask us to delete it.

Cookies

Essential cookies keep sign-in and secure checkout working. An optional analytics category is off unless you allow it. Change your choice any time via Cookie preferences in the footer.

Your choices

You can ask for a copy of what we hold about you, or ask us to delete it, at /privacy/request. We will confirm it is you first. We keep the records we are required to retain — sales, signed waivers, any credit you are owed — and delete the rest.