Privacy Policy

1. Information We Collect

• Account information — your name/display name, email address, and a securely hashed password. We never store passwords in plain text (they are hashed with bcrypt).
• Order information — the items you buy, order totals, shipping address, and order status. Creators can see the orders placed in their own storefront.
• Payment information — card payments are processed by Stripe. We do not receive or store your full card number, CVV, or bank details. We store only a payment reference to reconcile your order.
• Creator information — if you are a creator, the details you provide for your storefront (handle, bio, images, payout method) and the partnership agreement record.
• Usage & analytics data — pages viewed, approximate device/browser type, and referring site. To count unique visitors, we use a daily-rotating, salted hash derived from your IP address — we do not store your raw IP address for analytics. Known bots are excluded.
• Communications — messages you send us through support, and email addresses you provide for reminders (drops, restock, wishlist alerts).

2. Cookies & Similar Technologies

We use a small number of first-party cookies and session identifiers, and no third-party advertising trackers:

• A session cookie to keep you signed in and secure your forms (CSRF protection).
• A referral cookie to credit the correct affiliate when you arrive via a referral link.
• A visitor cookie to recognize repeat scans of a creator's QR code.

You can clear or block cookies in your browser, but some features (such as signing in and checkout) may not work correctly without them.

3. How We Use Information

• To create and manage your account and process your orders;
• To design, produce, ship, and support your merchandise;
• To send transactional emails (order confirmations, shipping and delivery updates) and, where you opt in, reminders such as drop launches, restocks, wishlist price drops, and limited-edition alerts;
• To calculate creator earnings, affiliate commissions, and payouts;
• To understand aggregate Platform usage and improve the service;
• To detect, prevent, and address fraud, abuse, and security issues;
• To comply with legal obligations.

4. How We Share Information

We do not sell your personal information. We share it only as needed to run the Platform:

• Payment processing — with Stripe to process payments and payouts.
• Fulfillment & shipping — with the manufacturing and shipping partners who produce and deliver your order (your shipping details).
• Creators — a creator can see the orders, items, and shipping details for purchases made in their own storefront.
• Service providers — our hosting and email providers, acting on our behalf.
• Legal — where required by law, or to protect our rights, users, or the public.

5. Data Retention

We keep account and order records for as long as your account is active and as needed to fulfill orders, comply with legal, tax, and accounting requirements, and resolve disputes. Analytics page-view records are automatically purged after approximately 180 days.

6. Security

We take reasonable measures to protect your information, including hashed passwords (bcrypt), optional two-factor authentication, encrypted connections (HTTPS), brute-force rate limiting, CSRF protection, and security headers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Choices & Rights

• You can view and update your account information after signing in.
• You can unsubscribe from optional reminder emails at any time; transactional emails (such as order confirmations) are part of the service.
• Depending on your location, you may have rights to access, correct, delete, or export your personal data, or to object to certain processing. To make a request, contact us using the details below.

8. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you the right to:

• Know what personal information we collect, use, and disclose;
• Access and request a copy of your personal information;
• Delete personal information we have collected, subject to legal exceptions;
• Correct inaccurate personal information;
• Opt out of the "sale" or "sharing" of personal information — note that we do not sell or share your personal information as those terms are defined under the CPRA;
• Non-discrimination — we will not deny you service or charge you a different price for exercising these rights.

To exercise any of these rights, contact us at legal@repursocialite.com. We will verify your request and respond within the timeframes required by law. You may use an authorized agent to submit a request on your behalf.

9. Children's Privacy

The Platform is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

10. International Users

We operate under the laws of the State of Delaware, USA. If you access the Platform from outside that jurisdiction, you understand your information may be processed there, where privacy laws may differ from your own.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted here with a new "Last updated" date.

12. Contact

Questions or requests about your privacy? Contact us at legal@repursocialite.com or through our support page.