01Scope
This Privacy Policy explains how Relicfy collects, uses, shares, and protects your personal information when you use our website, create an account, place an order, request custom work, approve a proof, join an email list, or otherwise interact with us.
It applies to Relicfy’s direct website and services. Etsy, Stripe and other third parties may process information under their own privacy notices when you interact with them.
02Information we collect
Depending on how you use Relicfy, we collect the following categories:
- Identifiers and contact details, such as name, email address, telephone number and account ID.
- Account information, including profile photo, authentication records, preferences and saved addresses.
- Billing and shipping details, order contents, transaction status, discounts, refunds and purchase history.
- Custom-project materials, including photos, logos, artwork, instructions, messages, quotes, proofs and approval records.
- Saved products, favorites, cart contents and other account choices.
- Technical and security data, such as IP address, browser, device, timestamps, request logs and authentication events.
- Marketing choices, email confirmation status and unsubscribe records.
03How we obtain information
We receive information directly from you, automatically from your browser or device, from service providers acting for us, and from marketplaces such as Etsy when you place an order there and authorize the marketplace to share order and delivery information with sellers.
04How we use information
We use personal information to provide accounts; prepare quotes and proofs; process and fulfill orders; personalize products; communicate about projects and deliveries; provide support; maintain favorites and carts; process payments and refunds; detect fraud; secure and troubleshoot the service; maintain business and tax records; enforce our terms; comply with law; and send consented marketing.
We do not sell personal information for money and do not use Customer Content to train generative AI models.
05Cookies, local storage and analytics
Relicfy uses essential cookies and similar technologies for authentication, security and core site operation. The browser also stores cart contents, favorites and certain interface preferences locally on your device.
Relicfy does not currently run third-party behavioral advertising or analytics on the site. If that changes, we will update this Policy and provide any notice or consent controls required by law. You can clear cookies and local storage through your browser, but doing so may sign you out or remove saved local choices.
06Payments
Stripe processes payments and may collect card, bank, billing, device and fraud-prevention information. Relicfy receives limited transaction information such as payment status, amount, method type, processor identifiers and refund history. Relicfy’s application database does not store full card numbers or card security codes.
Orders paid through Etsy are processed by Etsy and its payment partners; Relicfy receives the order information Etsy makes available to the seller.
07When we share information
We disclose only the information reasonably needed for the purpose described. We may share information with:
- Supabase for database, authentication and private file storage.
- Stripe for payment processing, refunds and fraud prevention.
- Hostinger for website hosting, delivery and security.
- Resend for transactional messages and consented email confirmations or updates.
- Shipping carriers and fulfillment partners for delivery and claims.
- Etsy or another marketplace for orders placed or synchronized through that marketplace.
- Professional advisers, insurers and authorities when reasonably necessary to protect rights, investigate fraud, comply with law, or respond to valid legal process.
- A successor in a merger, financing, reorganization or sale, subject to appropriate confidentiality and notice requirements.
08How long we retain information
We retain information only as long as reasonably necessary for the purposes above, including these general periods:
- Account and profile data: while the account is active and generally up to 30 days after a verified deletion request, unless continued retention is required.
- Order, invoice, payment, refund and tax records: generally seven years after the transaction for accounting, tax, fraud and dispute purposes.
- Custom files, proofs and project messages: during the project and generally for 24 months after completion to support remakes, reorders and disputes, unless you request earlier deletion and no legal or operational exception applies.
- Security and access logs: generally up to 12 months, with longer retention for an active investigation.
- Email subscription and consent records: until you unsubscribe; we may retain a minimal suppression record to honor the opt-out.
- Backups: deleted information may remain in encrypted, access-restricted backups for up to 90 additional days before routine rotation.
09Security
We use reasonable administrative, technical and organizational safeguards, including access controls, authenticated sessions, private storage, row-level database permissions, encryption in transit and limited-duration signed links for protected files. No system can guarantee absolute security. If a breach affects protected information, we will investigate and provide notices required by applicable law.
10Your privacy choices
You may update many profile and address details in your account, unsubscribe through an email link, and control browser storage through your device. You may also ask to access, correct, delete or receive a copy of eligible personal information, or object to certain processing, subject to identity verification and legal exceptions.
11Privacy requests
Submit a request through our contact page and identify it as a privacy request. We may ask for information reasonably necessary to verify that you are the account holder or an authorized agent. We will respond within the period required by applicable law and explain any denial or limitation.
Deletion does not require us to erase information that must be retained for completed transactions, taxes, fraud prevention, security, legal claims, or another lawful exception. We will not discriminate against you for exercising an applicable privacy right.
12Email and marketing
Newsletter enrollment uses confirmation where enabled. You can unsubscribe at any time using the link in a marketing message. Transactional communications about an account, proof, order, payment, security event or support request may still be sent when necessary to provide the service.
13Children
Relicfy is not directed to children under 13 and does not knowingly collect personal information from them. Accounts and purchases are intended for adults. If you believe a child under 13 submitted personal information, contact us so we can review and delete it as required.
14Data locations and transfers
Relicfy and its providers may process information in the United States and other countries where they operate. Those locations may have different privacy laws. Where required, providers use contractual or other lawful safeguards for cross-border transfers.
15Changes to this Policy
We may update this Policy to reflect changes in the service, providers or law. We will post the revised version and update the date. Material changes may receive additional notice before taking effect where appropriate.
16Contact
For privacy questions or requests, use the Relicfy contact page. Please do not send passwords, full payment-card numbers, or other unnecessary sensitive information in your message.