Privacy Policy
This policy describes what we collect and how we use it. Placeholder pending counsel review.
What we collect
Account identifiers and profile details you provide, including your verified email, name, phone, saved shipping details, order history, and marketing preference. We also retain compliance records associated with attestations, which may include a timestamp and IP address for audit purposes. Passwords and session tokens are handled by our authentication provider and are not stored in our customer profile or order records.
How we use it
To authenticate your account, process and communicate about orders, provide support, maintain compliance records, prevent abuse, and meet legal obligations. Transactional account and order email is separate from optional marketing email.
Email choices
We send account security and order-related messages needed to provide the service. Product, availability, and certificate updates are sent only when you opt in, and you may unsubscribe from marketing messages at any time.
Retention
We retain account data while your account is active and retain order, payment, and attestation records for as long as needed for legal, fraud-prevention, and compliance purposes. Account deletion may not remove records we are legally required to keep.
Sharing
We share data only with service providers needed to operate authentication, hosting, order communications, and optional marketing, and as required by law. We do not share passwords or authentication tokens with marketing providers.
Version: draft-2026-07