Privacy policy

## 1. Your Privacy at Merch HQ
At Merch HQ, your privacy is our top priority. When you visit usemerchhq.com, we do not use cookies, and we do not collect personal data. If you decide to create an account, we only ask for the bare minimum and share it only with services that are absolutely necessary for the app to function.


## 2. Information We Collect About Website Visitors
Our approach to data collection is simple: we don’t track individuals. Here's what you can expect as a visitor to our website:

- We collect no personal information.
- We store no cookies in your browser.
- We neither share, send, nor sell any information to third parties.
- We do not share information with advertisers.
- We do not mine or harvest data for personal trends.
- We do not monetize any information.

### 2.1 Anonymous Web Analytics
We use **Cabin** to gather anonymous usage data for statistical purposes only. Our aim is to understand overall trends in website traffic, not to track individual visitors. The anonymous usage data is securely stored in an EU-Datacenter.

Data collected includes:
- Referral sources.
- Top pages.
- Visit duration.
- Bounce rate.
- Device information (type, operating system, country, and browser).

All data is collected in aggregate form, with no personal information included. Cabin collects anonymized, non-identifiable data, ensuring no IP addresses or user-specific details are stored. You can find more information about [Cabin](https://withcabin.com/privacy/usemerchhq.com) here.


## 3. Information We Collect About Customers & Subscribers
We only collect the information necessary to provide the services you sign up for. We also work with trusted external service providers that meet high standards for data protection, privacy, and security.

### 3.1 What We Collect and What We Use It For
- **Email:** Required for account creation, used for login, personalization, and essential communications. You may also enter email addresses of colleagues to invite them to your team.
- **First name:** So we know who we are talking to.
- **First-party Cookie:** Stored for login persistence, enabling automatic login on return visits. *(You can adjust or delete cookies in your browser settings.)*
- **Amazon Marketplaces Data:** In order to show you your Amazon Merch business data, we securely connect to your Amazon Merch account via secure OAuth authorization (more specifically: Amazon SP-API and Amazon Ads API).
- **Supabase DB & Auth:** Hosted on servers in Frankfurt, Germany. All collected data is encrypted and hosted in the EU, adhering to strict EU privacy laws.
- **Billing with Creem:** Paid plans are billed through Creem, a Merchant of Record that simplifies tax duties.
*(See [Creem's Privacy Policy](https://www.creem.io/privacy) for details.)*
- **Third-party Email Service:** Transactional and marketing emails are sent via Brevo.
*(Refer to [Brevo's Privacy Policy](https://www.brevo.com/legal/privacypolicy/) for more information.)*
- **Customer Support Communication:** Communication history (emails) is retained solely for addressing your queries.
- **In-app Tracking with Logsnag:** Used to analyze user interactions and activities within our app. Tracks event types only; no user IDs or email addresses are collected. (See [Logsnag's Privacy Policy](https://logsnag.com/privacy) for details.)


## 4. Data Security
We take data security seriously and implement industry-standard measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.

In the unlikely event of a data breach, we will notify affected users promptly in accordance with applicable laws and our internal incident response plan.


## 5. Data Retention & Your Rights

### 5.1 Retention
We retain your information as long as your account is active or as necessary to provide you with our services. We also retain data to comply with legal obligations, resolve disputes, enforce agreements, or protect Merch HQ’s legal rights.

### 5.2 Your Rights
You have the right to:
- Access or correct any personal data we store about you.
- Object to any processing of your data.
- Delete your account and all associated data. *(All your data will be permanently deleted immediately upon account deletion.)*

To exercise these rights, please contact us at **hey@usemerchhq.com**.


## 6. Legal Compliance
Merch HQ complies with applicable data protection regulations, including the **General Data Protection Regulation (GDPR)** and the **California Consumer Privacy Act (CCPA)**. We ensure that your data is handled in accordance with the highest privacy standards globally.


## 7. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page, and we will notify you of significant updates. Previous versions of this Privacy Policy are archived and available upon request.


## 8. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
**hey@usemerchhq.com**