0. About this Policy
This Privacy Policy explains how [ENTITY NAME], a [STATE] [entity type] ("RoboWear," "we," "us"), collects, uses, shares, and protects personal information when you use the RoboWear marketplace at optimumrobowear.com, the 3D try-on studio, checkout, and related services (the "Platform"). RoboWear operates a vendor-fulfilled marketplace connecting buyers with independent makers ("Vendors"). This Policy applies to Buyers, Vendors, and visitors. It is intended for users in the United States.
By using the Platform you acknowledge this Policy. If you do not agree, do not use the Platform.
Company registration is being finalized; the operating entity name and governing state (shown as [ENTITY NAME] / [STATE] below) will be filled before real-money checkout opens. This Policy is effective as written.
1. Information We Collect
1.1 You provide:
- Account data — name, email, password (hashed), and (for Vendors) shop/business details.
- Order data — items, shipping address, contact info, order history. Payment card numbers are entered directly with our processor (Stripe); RoboWear does not store full card numbers.
- Vendor onboarding/KYC — identity, tax, and banking details collected and verified directly by Stripe via Stripe Connect Express. RoboWear receives only limited verification status and a Connect account identifier, not the underlying KYC documents.
- Content — product listings, photos, messages, and support requests you submit.
1.2 Collected automatically:
- Usage/analytics — page views and funnel events via Vercel Analytics, which is cookieless and does not use cross-site tracking identifiers.
- Device/log data — IP address, browser type, and request logs, used for security, rate-limiting, and fraud prevention.
1.3 From third parties: verification status from Stripe; delivery/tracking status from carriers (relayed by Vendors).
2. How We Use Information
- Provide and operate the Platform, the 3D studio, checkout, and accounts.
- Process orders and payments, and route Vendor payouts (via Stripe).
- Calculate, collect, and remit sales/use tax as a marketplace facilitator, and issue tax forms (e.g., 1099-K to Vendors where required).
- Share necessary order details with the Vendor to fulfill and ship your order.
- Communicate order confirmations, shipping updates, and service notices (via email; Resend is our email processor).
- Prevent fraud, abuse, and security incidents; enforce our Terms.
- Improve the Platform using aggregate, non-identifying analytics.
We do not sell personal information for money, and we do not use cross-context behavioral advertising.
3. How We Share Information
- With Vendors — for an order you place, the Vendor receives the ship-to name/address and order contents needed to fulfill and ship. Vendors are independent controllers of that information for fulfillment.
- With service providers (processors) — Stripe (payments, payouts, KYC), Vercel (hosting, cookieless analytics), Resend (transactional email), and carriers (shipping). They act under contract and only as needed.
- For legal/safety — to comply with law, respond to lawful requests, enforce our Terms, or protect rights, safety, and property.
- Business transfers — in a merger, acquisition, or asset sale, with notice as required by law.
4. Cookies & Tracking
We use strictly-necessary cookies for sign-in/session and security. Our analytics (Vercel) is cookieless. We do not deploy advertising or cross-site tracking cookies. If that changes, we will update this Policy and provide any required consent controls.
5. Data Retention
We retain account and order records for as long as your account is active and as needed to provide the Platform, comply with tax/accounting/legal obligations (e.g., transaction and tax records), resolve disputes, and enforce agreements. We then delete or de-identify the data.
6. Security
We use reasonable administrative and technical safeguards (hashed passwords, encrypted secrets, access controls, payment data handled by Stripe). No system is perfectly secure; we cannot guarantee absolute security.
7. Your Rights
Depending on where you live (e.g., California CCPA/CPRA and other U.S. state privacy laws), you may have rights to: access, correct, or delete your personal information; obtain a portable copy; opt out of sale/sharing (note: we do not sell or share for cross-context advertising); and not be discriminated against for exercising rights. To exercise rights, contact [[email protected]]. We will verify your request and respond within the time required by law. You may authorize an agent to act for you.
8. Children
The Platform is for adults (18+). We do not knowingly collect personal information from children under 13 (or under 16 where applicable). If you believe a child provided us data, contact us and we will delete it.
9. International Users
The Platform is operated from the United States and intended for U.S. users. If you access it from elsewhere, you consent to processing in the United States.
10. Changes to this Policy
We may update this Policy. Material changes will be posted with a new effective date and, where required, additional notice. Continued use after the effective date constitutes acceptance.
11. Contact
Questions or requests: [[email protected]] · [ENTITY NAME], [mailing address].
Effective date: [DATE]. Processors referenced: Stripe, Vercel, Resend. Confirm this list matches production before publishing.