Privacy Policy

1. Introduction

Smizzy ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use our website and services at smizzy.store ("the Service").

2. Information We Collect

2.1 Information You Provide

• Account Data: Email address and authentication credentials when you create an account.
• Order Data: Shipping address, payment information (processed securely by Stripe — we do not store card numbers), and order details.
• Design Data: Text prompts, uploaded images, generated artwork, QR code URLs, and design preferences you provide when using the generator.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, design generation count, and interaction patterns.
• Device Data: Browser type, operating system, device type, and screen resolution.
• Analytics Data: We use Google Analytics and Google Tag Manager, Meta, Pinterest, OpenAI Ads, and related measurement tools by default to understand how the Service is used and whether advertising leads to actions such as generating a design, saving or sharing a design, adding an item to a cart, or completing an order. These services may receive IP addresses, browser details, referral or attribution identifiers, browsing behavior, order totals, product details, and hashed account identifiers. Routine puzzle measurement does not include your design prompts or artwork. You can turn off analytics and advertising measurement for this browser using Privacy choices. We also use Vercel Speed Insights for page-performance measurements.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service.
• Process and fulfill your orders.
• Generate AI-powered designs based on your prompts.
• Send transactional emails (order confirmations, shipping updates).
• Prevent fraud and enforce our Terms of Service.
• Analyze usage trends to improve the user experience.
• Comply with legal obligations.

4. How We Share Your Information

We share information with the following types of providers, subject to the measurement choices described below:

• Fulfillment Partners: Print-on-demand and shipping providers who need order details to produce and deliver your products.
• Payment Processors: Stripe processes payments securely on our behalf.
• AI Service Providers: Design prompts may be sent to third-party AI image generation APIs to create your artwork.
• Analytics and Advertising Providers: Google Analytics and Google Tag Manager, Meta, Pinterest, OpenAI Ads, Vercel Speed Insights, and related tools for usage, advertising effectiveness, and performance analysis, subject to your measurement preferences described below.
• Legal Requirements: When required by law, regulation, or legal process.

5. Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS). We implement industry-standard security measures including encryption in transit (TLS) and at rest, row-level security policies, and secure authentication protocols. However, no method of electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your account data for as long as your account is active. Saved design drafts are automatically deleted after 30 days if not purchased. Order data is retained for legal and accounting purposes. You may request deletion of your account and associated data at any time by contacting us.

7. Cookies & Tracking Technologies

We use essential cookies and storage for sign-in, your cart, saved designs, security, and checkout. Analytics and advertising measurement are enabled by default. Use Privacy choices in the footer to turn them off or allow them for this browser. Both choices leave essential shopping features available.

Turning measurement off reloads the page to stop optional browser tracking. Once your choice is saved, it also stops future server conversion reporting associated with this browser, including signup and pending checkouts. The preference cookie lasts 180 days; a backup opt-out remains in this browser’s storage until you allow measurement or clear that storage. Using another browser or clearing site data may reset your choice. Changing your choice does not erase data already sent to providers or recall requests already in progress.

We honor Global Privacy Control and Do Not Track signals by keeping analytics and advertising measurement off, even if you previously allowed them here. An existing browser opt-out also takes priority. Browser cookie controls are available separately, but disabling essential cookies may affect sign-in or shopping.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your personal data.
• Object to or restrict processing of your data.
• Request data portability.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, please contact us at the email address below.

9. Children's Privacy

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will take steps to delete it promptly.

10. Third-Party Links

QR codes on currently supported products or compatible legacy orders, and other links in the Service, may direct users to third-party websites. We are not responsible for the privacy practices or content of those external sites. We encourage you to review their privacy policies.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page with a revised "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at support@smizzy.store.