Draft · Legal review required before release
Privacy Policy
This draft describes how [LEGAL COMPANY NAME] processes information when sellers use SocialShop and buyers use seller storefronts. It must be reviewed and completed before release.
Who is responsible
Service operator: [LEGAL COMPANY NAME], [REGISTERED ADDRESS]. Privacy contact: [CONTACT EMAIL]. The controller/processor roles for seller storefront data require legal confirmation.
Information we collect
We process account identifiers and profile details, store and offer content, selected media and links, product configuration, orders, requests, reviews, favorites, promotions, analytics identifiers, and operational logs when those features are used.
Payment-provider data is processed server-side when enabled. SocialShop does not place server secrets in the browser or native application.
How we use information
We use information to authenticate users, publish and manage storefronts, calculate carts, support transactions and fulfillment, prevent abuse, provide seller analytics, handle support, and meet legal obligations.
The legal bases for each purpose must be confirmed during legal review.
Public information
Published store names, descriptions, banners, links, offers, prices, availability information and eligible reviews can be visible publicly at a seller’s SocialShop URL. Internal costs and private order/customer details are not public.
Sharing and service providers
We use infrastructure providers including Supabase and Vercel to operate SocialShop. Additional payment or communication providers must be added to this policy before production use. We do not sell personal information.
Retention and deletion
Final retention periods: [RETENTION PERIODS]. Users can initiate account deletion inside the native app. Public stores are unpublished and data is deleted or anonymized where possible. Limited transaction records may be retained for accounting, fraud prevention, disputes or delivery where legally required.
Security and international transfers
SocialShop uses access controls, row-level security, private storage and server-side authorization. No service is perfectly secure. International-transfer mechanisms and locations require legal confirmation.
Your rights
Depending on your location, you may have rights to access, correct, delete, restrict or export information. Contact [CONTACT EMAIL]. Identity verification may be required.
Children and changes
SocialShop is not intended for children below the minimum age that will be defined for launch. We may update this policy and will publish the effective version here.
Contact
Email: [CONTACT EMAIL]. Postal address: [REGISTERED ADDRESS].