Privacy Policy

Last updated: July 4, 2026

1. Who this covers

This policy describes how the platform handles personal data for two groups: Shop Owners (studios that register a shop) and End Customers (people who create accounts or make purchases on a shop’s storefront). Each Shop Owner is independently responsible for their own storefront’s policies and legal obligations toward their own customers; this policy covers only the platform’s own processing.

2. Data we collect

• Account data — name, email address, and a hashed password for Shop Owner and End Customer accounts; shop details such as business name and domain.
• Order and booking data — items purchased, class enrollments, memberships, and related history, so shops can fulfill and you can review them.
• Support and contact messages — anything you send through contact forms.

3. Payments (Stripe)

Card payments are processed by Stripe; card numbers go directly to Stripe and never touch our servers. We store only payment references (such as session and charge identifiers) and amounts needed for receipts, fulfillment, and refunds. Stripe processes your data under its own privacy policy.

4. Email (Resend)

Transactional email — receipts, booking confirmations, reminders, password resets — is delivered via Resend, which processes recipient addresses and message content in order to deliver mail. Non-essential email includes an unsubscribe link.

5. Cookies

We use a single first-party authentication cookie containing a signed token (JWT) to keep you logged in. It is not used for advertising or cross-site tracking. It expires or is cleared when you log out.

6. Data retention

Account, order, and booking records are retained while the associated account or shop is active, and for a reasonable period afterward as needed for bookkeeping, dispute resolution, and legal compliance, after which they are deleted or anonymized. Shop Owners can request deletion of their shop’s data after closing their shop; End Customers can request deletion of their account data from the shop they transacted with or from us.

7. Sharing

We share data only with the processors named above (Stripe, Resend), with our hosting and database infrastructure providers, with the relevant Shop Owner (who sees their own customers’ orders and enrollments), and where required by law. We do not sell personal data.

8. Your rights

You may request access to, correction of, or deletion of your personal data. Contact the shop you transacted with, or reach the platform through its contact form, and we will respond within a reasonable time.

9. Changes

We may update this policy; material changes will be announced to Shop Owners by email or in-product notice before they take effect.