Privacy Policy

1. Information We Collect

Information You Provide

• Sellers: Full name, email address, storefront name, default settings (box ID, condition), shipping rate preferences
• Buyers: Name, email address, PayPal email address (collected at time of claim)
• All users: Any messages sent through the platform, questions asked on listings

Information Collected Automatically

• Browser type and device type
• Pages visited and time spent on the Service
• IP address
• Cookies and similar tracking technologies (see Section 6)

Information from Third Parties

• Payment and billing information is handled by Lemon Squeezy. We do not store credit card numbers or full payment details.
• PayPal email addresses are collected solely to facilitate invoices between buyers and sellers. We do not process payments directly.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Operate and improve the Service
• Send transactional emails (claim confirmations, invoice notifications, shipping updates)
• Send service-related notifications (payment failures, account status)
• Send post-onboarding email sequences to help sellers get started
• Respond to support requests
• Enforce our Terms of Service
• Comply with legal obligations

We do not sell your personal information to third parties. We do not use your information for advertising purposes.

3. How Your Information Is Shared

Between Sellers and Buyers

• A buyer's name is visible to the seller when a claim is made
• A buyer's PayPal email address is visible only to the seller in their Claims Dashboard for invoicing purposes. It is never visible to other buyers.
• A seller's storefront name, description, and listings are publicly visible to anyone with the store link

With Service Providers

We share information with trusted third-party providers who help us operate the Service:

• Supabase — database and authentication
• Cloudflare R2 — image storage and delivery
• Vercel — application hosting
• Lemon Squeezy — subscription billing
• Resend — email delivery

We may disclose your information if required to do so by law, court order, or governmental authority.

4. Data Retention

• Active accounts: Data retained for the duration of your subscription
• Cancelled accounts: Data retained for 60 days after cancellation, then permanently deleted
• Buyer guest data: Claims and associated email addresses retained for 12 months after last activity

You may request deletion of your data at any time by contacting us at privacy@comichero.app or using our data deletion request form.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request that we correct inaccurate or incomplete data
• Deletion: Request that we delete your personal data
• Portability: Request that we provide your data in a portable format
• Objection: Object to certain types of processing of your data

To exercise any of these rights, use our data deletion request form or contact us at privacy@comichero.app. We will respond within 30 days.

For EU/EEA residents: You have additional rights under the GDPR and the right to lodge a complaint with your local data protection authority.

6. Cookies and Tracking

We use cookies and similar technologies to:

• Keep you logged in to your account
• Remember your preferences
• Analyze how the Service is used

Cookie Types We Use

• Essential cookies: Required for the Service to function (authentication, session management). Cannot be disabled.
• Analytics cookies: Help us understand how the Service is used. Can be declined.

When you first visit the Service, you will be shown a cookie consent banner. You may accept or decline non-essential cookies at any time. We do not use advertising cookies or sell cookie data to third parties.

7. Data Security

We take reasonable technical and organizational measures to protect your information, including:

• Encrypted data transmission (HTTPS)
• Row-level security on our database ensuring sellers can only access their own data
• Buyer PayPal email addresses masked except where necessary for invoicing
• Regular automated database backups

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

8. Children's Privacy

The Service is not intended for children under 13 years of age. Seller accounts require users to be at least 18 years old. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected information from a child under 13, please contact us at privacy@comichero.app.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date at the top of this page and notify users via email if the changes are material. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

Email: privacy@comichero.app