Privacy Policy

Effective date: [insert on publish]

This is a working draft describing what Legacy Pullz actually collects and why, written in plain terms so a lawyer has something concrete to refine rather than a blank page. Have it reviewed before publishing, particularly the data-retention and any state-specific privacy rights sections (e.g. CCPA) relevant to where your customers are located.

1. What we collect

When you create an account and use Legacy Pullz, we collect:

Contact information: your name, email address and/or phone number.
Shipping address: used to deliver physical cards to you.
Account credentials: your password, stored in hashed (not plain-text) form.
Order history: which packs you've purchased, reveal videos assigned to you, and shipment status.
Payment information: processed directly by our payment processor (Stripe). Legacy Pullz does not receive or store your full card number.

2. How we use it

We use this information to create and maintain your account, process and fulfill your orders, ship your cards, communicate with you about your orders, verify your identity and age where required, and improve the app. We do not sell your personal information to third parties.

3. Who we share it with

We share information only as needed to operate the service: our payment processor (Stripe) to process transactions, shipping carriers to deliver your orders, and any hosting or infrastructure providers we use to run the app. These providers are only given the information they need to perform their function.

4. Data retention

We retain account and order information for as long as your account is active and as needed to comply with our legal and tax obligations. [Placeholder: confirm a specific retention period with counsel based on your state's requirements.]

5. Your choices

You can update your account information, including your shipping address, at any time from your account settings. You can request that we delete your account and associated personal data, subject to what we're legally required to retain (such as order records for tax purposes), by contacting support.

6. Children's privacy

Legacy Pullz is not directed at, and does not knowingly collect personal information from, anyone under the age of 18. If we learn that we've collected information from someone under this age, we will delete it.

7. Security

We use reasonable technical and organizational measures to protect your information. No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated effective date above.

9. Contact

Questions about this policy can be directed to legacypullz@gmail.com.