Privacy Policy

Last updated: [Effective date]

Template — to be replaced by counsel

This page is placeholder template text provided so the site is complete. It is not legal advice and has not been reviewed by a lawyer. Replace it with the final version approved by your legal counsel before launch; bracketed items like [Company legal name] must be filled in.

This policy explains what personal data Swaglists processes, why, and the choices you have.

1. Who we are

[Company legal name] (“Swaglists”, “we”) operates this website, the merchant dashboard and the API. For account and billing data we are the controller. For the personal data of your customers that you send us to fulfill orders (names, shipping addresses, phone numbers, emails), we act as your processor under [the data processing terms].

2. Data we collect

Account data: name, email, company details, team members and roles, authentication data (password hashes, two-factor settings) and sign-in history (IP address, device).
Billing data: credit purchases, wallet transactions and billing contacts. Card and bank details are collected and stored by our payment processor; we only keep a reference and the last digits.
Order data: products, artwork files and the recipient details you submit for each order.
Usage and technical data: API request logs, webhook delivery logs, security logs and error reports.
Contact form messages: the details you send us when you contact us.

3. How we use data

To provide the service: produce and ship orders, process payments, send transactional emails and webhooks.
To secure the service: authentication, fraud prevention, rate limiting and audit logs.
To support you and improve the service.
To comply with legal obligations (for example tax and accounting records).

We share data only as needed to run the service: with production facilities and shipping carriers to fulfill your orders, with our payment processor, with hosting, storage and email providers, and with authorities where required by law. We do not sell personal data. [List sub-processors or link to the list.]

5. Cookies and local storage

We use a strictly necessary session cookie to keep you signed in and local storage for preferences such as the light/dark theme. We don't use advertising cookies. [Update if analytics are added.]

6. Retention

We keep account and billing records for as long as your account is active and as required for legal and accounting purposes. Operational logs (such as API request and webhook logs) are kept for a limited period, typically [30–90] days. Order data is kept for [period] to handle damage and misprint claims, disputes and tax obligations.

7. Security

We protect data with encryption in transit, encryption of secrets at rest, hashed passwords and API keys, two-factor authentication, role-based access and audit logging. No system is perfectly secure; tell us at support@swaglists.com if you suspect a problem.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict certain processing. Contact us to exercise these rights. Your customers should contact you first; we will assist you as your processor. [Add jurisdiction-specific rights, e.g. GDPR / CCPA.]

9. International transfers

[Describe where data is hosted and the safeguards used for international transfers.]

10. Changes and contact

We may update this policy and will notify you of material changes. Questions: contact us or email support@swaglists.com.