Privacy Policy

1. Information We Collect

We collect information you provide directly:

• Partners: Name, email, phone number, Instagram handle, business description, Stripe account information, and store details.
• Customers: Name, email, shipping address, and payment information (processed by Stripe — we never store card numbers).
• Applicants: Name, email, phone, Instagram handle, and business information submitted via the application form.

We also automatically collect standard web analytics data: IP address, browser type, device type, pages visited, and timestamps. This data is used for security and performance monitoring only.

2. How We Use Your Information

• To operate the Platform — processing orders, managing reservations, facilitating payments, and shipping products.
• To communicate with you — transactional emails, SMS notifications, shipping updates, and platform announcements.
• To improve the Platform — analytics, performance monitoring, and feature development.
• To protect the Platform — fraud prevention, dispute resolution, and enforcing our Terms of Service.

3. Information Sharing

We do not sell your personal information. We share data only with:

• Stripe: Payment processing and partner payout management. Stripe's privacy policy governs their handling of payment data.
• Resend: Transactional email delivery.
• Twilio: SMS and MMS notifications.
• Vercel: Platform hosting and infrastructure.
• Supabase: Database hosting and authentication services.
• Law enforcement: When required by law or to protect our legal rights.

4. Data Retention

We retain your data as long as your account is active or as needed to provide services. Order records are retained for 7 years for tax and legal compliance. You may request deletion of your account data by contacting us, subject to legal retention requirements.

5. Cookies and Tracking

We use essential cookies for authentication and session management. We do not use third-party advertising trackers. Our analytics are limited to first-party data for platform improvement.

6. SMS and Notifications

Partners may receive SMS notifications for sale alerts, shipping updates, weekly recaps, and milestone achievements. Partners can manage their notification preferences in their account settings at any time. Message and data rates may apply.

7. Data Security

We implement industry-standard security measures including encrypted connections (TLS/SSL), Row Level Security on all database tables, secure authentication via Supabase Auth, and timing-safe secret validation. Payment data is handled entirely by Stripe and never touches our servers.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal requirements).
• Opt out of non-essential communications.
• Export your data in a portable format.

To exercise any of these rights, contact us at the address below.

9. Children's Privacy

The Platform is not directed at individuals under 18 years of age. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email to registered users. Continued use of the Platform after changes constitutes acceptance.

11. Contact

For privacy-related questions or data requests, contact us at admin@barriosamethysts.com.