Privacy Policy

1. Information We Collect

We collect information you provide when using SayMore:

• Buyer information: email address, name, shipping address, and payment details (processed by Stripe; we do not store card numbers)
• Contributor information: name and email address (provided by the Buyer when sending invitations)
• Card content: the text messages and any images you submit for your deck
• Contact form submissions: name, email, and message content

2. How We Use Your Information

We use the information we collect to:

• Process and fulfill your card deck orders
• Send contributor invitations on your behalf
• Communicate about your order status
• Respond to your contact form messages
• Improve the Service and fix issues

We do not sell your personal information to third parties. We do not send marketing emails unless you explicitly opt in.

3. Third-Party Services

We use the following third-party services to operate SayMore:

• Stripe — payment processing. Stripe's privacy policy applies to payment data: stripe.com/privacy
• Supabase — database hosting and file storage
• Resend — transactional email delivery
• ShipStation — order fulfillment and shipping
• Vercel — website hosting and analytics

Each service processes data according to their own privacy policies. We only share the minimum data necessary for each service to perform its function.

4. Data Retention

We retain your deck data and order information for as long as needed to fulfill your order and provide customer support. Card content is stored securely during the deck creation process and retained after purchase to enable reprints if needed.

If you would like your data deleted, contact us and we will remove your information within 30 days, except where retention is required by law (e.g., tax records).

5. Cookies and Analytics

We use Vercel Analytics to understand how visitors use our site. This collects anonymized usage data such as page views and performance metrics. We do not use third-party advertising cookies or tracking pixels.

Essential cookies may be used to maintain your session while building a deck. These are strictly necessary for the Service to function.

6. Data Security

We take reasonable measures to protect your information, including:

• All data transmitted over HTTPS (TLS encryption)
• Payment data handled exclusively by Stripe (PCI-compliant)
• Database access restricted by Row Level Security policies
• Admin access protected by authentication

No system is perfectly secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights

You have the right to:

• Request a copy of the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Withdraw consent for non-essential data processing

To exercise any of these rights, contact us through our contact page.

8. Children's Privacy

SayMore is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this page periodically.

10. Contact

If you have questions about this Privacy Policy or how we handle your data, please reach out through our contact page.