Privacy Policy

1. Introduction

Welcome to PickyBundle ("we," "our," or "us"). We are committed to protecting your privacy and being transparent about how we collect, use, and share your information.

This Privacy Policy explains our practices regarding personal information we collect when you use our website and services at pickybundle.com (the "Service"). By using PickyBundle, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Username
• Profile information (optional): bio, social links, avatar

User-Generated Content

When you use our Service, we collect:

• Bundle data: titles, descriptions, items, categories
• Collection tracking: which items you mark as purchased or substituted
• Comments and interactions with other users' bundles

Payment Information

Payment processing is handled by Stripe. We do not store your credit card numbers directly. We may receive and store:

• Stripe customer ID
• Subscription status and billing history
• Last four digits of your card (for display purposes only)

Usage Data

We automatically collect:

• Page views and click data
• Device type and browser information
• IP address (anonymized for analytics)
• Referral source

Cookies and Tracking

We use cookies for:

• Essential cookies: Authentication and session management
• Analytics cookies: Understanding how users interact with our Service
• Affiliate cookies: Tracking purchases from affiliate programs

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our Service
• Process payments and manage subscriptions
• Track affiliate link activity
• Send transactional emails (account confirmations, payment receipts)
• Send optional notifications about your bundles and collections
• Analyze usage patterns to improve the platform
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Information Sharing

Public Information

Public bundles are visible to everyone on the internet. Your username, profile picture, and bio are visible on your public profile. Private bundles are only accessible via a direct link that you share.

Third-Party Service Providers

We share data with trusted third parties who help us operate our Service:

• Supabase: Database hosting and authentication
• Stripe: Payment processing
• Vercel: Website hosting
• Amazon Associates: Affiliate program tracking
• Future partners: ShareASale, CJ Affiliate, Impact (affiliate networks)

We Never Sell Your Data

We do not sell, rent, or trade your personal information to third parties for marketing purposes. Period.

Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

5. Cookies

Cookies are small text files stored on your device. Here's how we use them:

• Essential Cookies: Required for authentication and basic functionality. Cannot be disabled.
• Analytics Cookies: Help us understand how users interact with PickyBundle. Data is aggregated and anonymized.
• Affiliate Cookies: Track purchases made through affiliate links so we can attribute referrals correctly.

How to opt out: You can disable non-essential cookies through your browser settings. Note that this may affect some functionality.

6. Data Retention

• Account data: Retained until you delete your account
• Bundles and content: Retained until deleted by you or until account deletion
• Analytics data: Anonymized after 90 days
• Payment records: Retained as required by tax and legal obligations (typically 7 years)

7. Your Rights

Depending on your location, you may have the following rights under GDPR, CCPA, or other privacy laws:

Right to Access

You can request a copy of all personal data we hold about you.

Right to Deletion

You can request that we delete your account and associated data. Some data may be retained for legal or business purposes.

Right to Data Portability

You can request an export of your data in a machine-readable format.

Right to Opt-Out

You can opt out of marketing communications at any time by clicking "unsubscribe" or contacting us.

California Residents (CCPA)

California residents have additional rights including the right to know what personal information is collected, the right to delete, and the right to opt-out of the "sale" of personal information. We do not sell personal information.

How to Exercise Your Rights

To make a data request, email us at support@pickybundle.com with the subject line "Data Request." We will respond within 30 days.

8. Security

We take the security of your data seriously and implement industry-standard measures:

• All data is transmitted over HTTPS (TLS encryption)
• Passwords are hashed and never stored in plain text
• Database hosted on Supabase with enterprise-grade security
• Payment data secured by Stripe (PCI DSS compliant)
• Regular security reviews and updates

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security against breaches beyond our control.

9. Children's Privacy

PickyBundle is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@pickybundle.com and we will promptly delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email if the changes significantly affect your rights
• Post a notice on our website

Your continued use of PickyBundle after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, contact us:

• Email: support@pickybundle.com
• Subject line for data requests: "Privacy Request"

We aim to respond to all inquiries within 30 days.