This policy explains what information Broidry collects, why, and what we do with it. The short version: we collect what's needed to run the service, we don't sell your information, and shops only see the order information their own buyers give them.
1. What we collect
- Account information — email address, passphrase (stored only as a salted hash), and your shop's details.
- Order information — when you buy from a shop: your name, contact details, order specifications, any photos you upload (like a handwriting sample), and shipping address if you ship.
- Content you add — listings, photos, reviews, messages, and feedback.
- Technical basics — logs and cookies needed for sign-in sessions and abuse prevention (like rate limiting). We don't run third-party advertising trackers.
2. How we use it
- To run the service: showing shop pages, processing orders, sending transactional email (order confirmations, quote links).
- To keep the platform safe: preventing spam, fraud, and abuse.
- To improve the product, using aggregate (not personal) usage patterns.
3. Who sees what
- Shops see their own buyers' order information — that's the product. Shops agree to use it only to fulfill orders and for their own customer relationships.
- Service providers — we use a small set of providers to operate (hosting, email delivery, payment processing via Stripe, and AI image and text processing as described below). They process data only on our instructions.
- Legal requirements — we disclose information if the law genuinely requires it.
- Nobody else. We do not sell personal information.
4. AI features
Some tools are powered by AI models run by outside providers. When a shop owner uses them, the content involved is sent to the provider to produce the result and is not used by Broidry for anything else:
- AI photos (listing photo studio, photo-real mockups, scene restyling) — the product or mockup picture, and any style example photos the owner saved, are sent to Google's image model to generate the new picture.
- AI writing (listing titles and descriptions) — the listing's details and its cover photo are sent to Anthropic's model to draft the words.
- These tools run only when an owner presses their button — never automatically on buyer information. If a mockup picture includes a customer's personalization (like a name), that picture is processed to make the image the customer asked to see.
5. Payment data
Card numbers never touch Broidry. Payments are processed by Stripe (or the payment method the shop offers, like Venmo); we see transaction outcomes, not card details.
6. Your choices
- Shop owners can download everything (every order, customer, quote, and setting, as one file) and permanently delete their shop, its data, its uploaded files, and their account — both from the dashboard's Security page, no email required.
- Buyers with an account can download everything Broidry holds about them (account details, orders, and conversations) and permanently delete their account — both from their account page. Orders they placed remain with the shops that made them: those are the shops' transaction records.
- Buyers without an account can ask a shop, or us (through the contact form), to delete their personal information from an order — some records may be retained where the law requires, like transaction records.
- Transactional emails are part of the service; marketing email from Broidry itself — if we ever send it — will always have a working unsubscribe.
7. Data retention and security
We keep data for as long as the account or order needs it, then delete or anonymize it. Order-tracking links stop showing the order's details (name, address, messages) 90 days after the order is finished or cancelled, so an old forwarded link doesn't expose them forever. Passphrases are hashed with scrypt; sessions are opaque tokens hashed at rest; access to production data is limited to the people who operate the platform.
8. Children
Broidry is not directed at children under 13 and we don't knowingly collect their information. Products for children are sold by shops; the buyer is always an adult.
9. Changes and contact
If this policy changes materially we'll post the new version here with a new date. Questions or requests: the contact form or Help & feedback in your dashboard.