Privacy Policy

1. Who this policy covers

Storely ("Storely," "we," "us," or "our") operates a platform that lets sellers of every kind ("Sellers") run an online storefront, and is the entity responsible for the platform and for the information described in this policy. Storely is currently operated as an early-stage platform and is onboarding sellers by invite as part of an early access program.

2. Information we collect

From Sellers

• Account details: name, email address, phone/WhatsApp number, password credentials, which are securely hashed and are not stored in plain text.
• Store and product information you add: product names, descriptions, images, prices, shade/size variants, and collection details.
• Payment setup information if you enable optional online payments (handled by our payment processor — see Section 4).
• Communications you send us, such as support requests.

From Shoppers (customers of a Storely-hosted store)

• Order details: name, phone/WhatsApp number, shipping address, and items ordered.
• Payment details, only if online payment is used — processed directly by our payment processor; Storely does not store full card numbers.
• Basic device and usage information (see Section 8, Cookies).

For Shoppers, the Seller whose store you're ordering from is generally responsible for that order relationship. Storely processes this data on the Seller's behalf to operate the platform.

3. How we use your information

• To create and operate Seller storefronts and Shopper orders.
• To send order confirmations and updates, including via WhatsApp where that's the checkout method a Seller has chosen.
• To provide customer support and respond to inquiries.
• To maintain the security and integrity of the platform, including preventing fraud and abuse.
• To improve Storely — for example, understanding which features Sellers use most.
• To send Sellers product updates, if they've opted in (see Section 8).

We do not sell personal information to third parties, and we do not use Shopper data to advertise to them on behalf of anyone other than the Seller whose store they ordered from.

4. How we share information

We share information only as needed to run the platform:

• Sellers can see the order and contact information of Shoppers who order from their own store — this is necessary to fulfill orders and is core to how Storely works.
• Service providers (sub-processors) who host and run parts of our infrastructure, currently including:
  • Database and authentication hosting (e.g. Supabase)
  • Application hosting (e.g. Vercel)
  • Payment processing, where online payment is enabled (e.g. Stripe)
  These providers only receive the data needed to perform their function and are contractually restricted from using it for other purposes.
• Legal requirements — we may disclose information if required by law, or to protect the rights, property, or safety of Storely, our Sellers, or the public.
• Business transfers— if Storely is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this policy or an updated one you're notified of.

5. How we store and protect data

Data is stored in a managed PostgreSQL database with tenant-level isolation, meaning each Seller's store data is scoped and access-controlled so one store cannot see another's data. We use encryption in transit (HTTPS/TLS) for all data sent to and from Storely. Access to production data is limited to authorized personnel who need it to operate the platform.

No system is completely secure, and we can't guarantee absolute security. If we become aware of a data breach affecting your information, we will notify affected users as required by applicable law.

6. How long we keep data

We keep account and order data for as long as the account is active, and for a reasonable period afterward to comply with legal, tax, or accounting requirements, or to resolve disputes. If a Seller closes their store, product listings are removed from public view; order history is retained for the period required by applicable law before deletion.

7. Your rights

Depending on where you're located, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Request deletion of your information, subject to legal retention requirements.
• Export your data in a portable format.
• Object to or restrict certain processing.

To exercise any of these rights, contact us using the details in Section 12. Shoppers who want their information corrected or removed from a specific store should also contact that Seller directly, since Sellers manage their own customer records.

8. Cookies and tracking

Storely uses cookies and similar technologies for:

• Essential functions— keeping you logged in, remembering your cart, and securing your session. These can't be turned off without breaking core functionality.
• Basic analytics — understanding aggregate usage patterns to improve the platform.

We do not currently use third-party advertising cookies. If a Seller opts into marketing communications (like the newsletter signup on our site), we use their email only to send product updates, and they can unsubscribe at any time.

9. Children's privacy

Storely is not directed at children under the age of 13, and we do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, please contact us so we can take appropriate steps to remove it.

10. International data transfers

Storely's service providers and infrastructure may store or process information in countries other than the country where you are located. This means your information may be transferred to and processed in jurisdictions with different data protection laws. Where applicable, we take reasonable steps to ensure that appropriate safeguards are used for such transfers.

11. Changes to this policy

We may update this policy as Storely evolves. If we make material changes, we'll notify Sellers by email or through the dashboard before the changes take effect. The "last updated" date at the top of this page reflects the most recent revision.

12. Contact us

Questions about this policy or your data can be sent to trystorely@gmail.com. If you've made a formal request under applicable data protection law, please state that clearly so we can route it correctly.