Privacy Policy

This Privacy Policy explains how Chisels(the “Service”) collects, uses, and shares information when you use it to build and run a store. By using the Service you agree to this policy.

1. Information we collect

• Account information: your email address and basic profile needed to sign in.
• Store content: the text, images, products, and settings you add to your stores.
• Order and customer data: information about orders placed on your stores, including buyer email and order contents. We process this on your behalf so you can operate your store.
• Usage data: logs and analytics about how the Service is used, to keep it reliable and secure.

2. How we use information

We use information to provide and improve the Service, including to:

• authenticate you and keep your account secure;
• host and display your stores and process orders;
• power AI-assisted building of your store;
• send transactional messages such as sign-in links and order notifications;
• maintain, debug, and protect the Service.

3. How information is shared

We share information with service providers who process it on our behalf, under agreements that limit their use of it. These typically include hosting and database providers, our payment processor, our email provider, and our AI provider. We may also share information to comply with law, enforce our Terms, or protect the rights and safety of our users. We do not sell your personal information.

4. Store owners and their customers

If you buy from a store built on Chisels, the store owner is the controller of your order data and is responsible for their own privacy practices. Chiselsprocesses that data on the owner’s behalf to run the store. Payment details you enter at checkout are handled by the payment processor, not stored by us.

5. Cookies

We use a small number of strictly necessary cookies, such as a session cookie to keep you signed in. We do not use them to track you across other websites.

6. Data retention

We keep information for as long as needed to provide the Service and for legitimate business or legal purposes. You can ask us to delete your account data, subject to obligations that require us to retain it.

7. Security

We take reasonable measures to protect information, including signed sessions and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, or to object to certain processing. To exercise these rights, contact us using the details below.

9. International transfers

The Service and its providers may process information in countries other than yours. Where required, we take steps to ensure appropriate safeguards for such transfers.

10. Children

The Service is not directed to children, and we do not knowingly collect personal information from them.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will take reasonable steps to notify you. The “last updated” date above reflects the latest version.

12. Contact

Questions about privacy or your data? Contact us at hello@chisels.dev.