Draft for legal review. Replace this notice once finalized by counsel.
What we collect
Account data: when you sign up, we store your email, name, business name, and contact details. Authentication is handled by Supabase (our database and auth provider).
Payment data: we use Stripe to process payments. We do not see or store your credit card details — Stripe handles that directly. We receive transaction metadata (amount, date, order details) needed to fulfill your order.
Order data: shipping address, Google review link you provide, custom logo files, and order status.
Tap and scan analytics: when a customer taps or scans one of your products, we log the timestamp, anonymized event type, user-agent string (for device-type stats), and a one-way hash of the IP address. We do not log the actual IP or any personally identifiable information about the person tapping.
What we don't collect
- We don't sell or share your data with third parties for marketing.
- We don't use third-party advertising trackers or pixels.
- We don't track the people who tap your cards beyond the anonymized analytics described above.
How we use it
- Fulfilling and shipping your orders
- Operating the redirect service that your cards depend on
- Showing you tap/scan analytics in your dashboard
- Sending transactional emails (order confirmation, shipping notifications, support replies)
- Improving our products and detecting abuse
Service providers we use
- Supabase — database and authentication
- Stripe — payment processing
- Resend — transactional email
- Vercel — website hosting
Your rights
You can request a copy of the data we hold about you, ask us to correct any errors, or request deletion of your account and associated data at any time. Email frank@marifradesigns.com and we'll respond within 30 days.
Note: if you delete your account, the redirect URLs printed on your physical cards will stop working. We'll let you know this clearly before processing the deletion.
Contact
Privacy questions go to frank@marifradesigns.com.