Privacy Policy

This Privacy Policy explains what information Spoolio ("we," "us," or "our") collects, how we use it, and the choices you have. It applies to your use of the Spoolio application (the "Service").

1. Information We Collect

Account information

Business/shop name, email address, and a securely hashed password when you create an account. We never store your password in plain text.

Business data you enter

Printers, filament inventory, product costs, orders, customer names, and failed-print logs that you add to manage your production.

Etsy account data (if connected)

If you connect your Etsy shop, we access order (receipt) and listing data via Etsy's Open API, using an access token you explicitly authorize. We request only the scopes needed to read shop, listing, and order information — we do not request or use permissions to edit your listings or send messages on your behalf. You can revoke this access at any time from your Etsy account settings.

Payment information (if applicable)

If Spoolio offers paid plans, payment is processed by a third-party payment processor (such as Stripe). We do not store your full card number on our servers.

2. How We Use Information

• To operate and provide the Service, including cost/margin calculations you request
• To authenticate your account and keep your session secure
• To sync order data from a connected Etsy shop, if you choose to connect one
• To communicate with you about your account or the Service
• To maintain the security and integrity of the Service

We do not sell your personal information to third parties.

3. Where Data Is Stored

Application data is stored using Neon (a managed Postgres database provider), and the Service is hosted on Vercel. Both providers may process data in the United States or other regions where their infrastructure operates.

4. Cookies

We use a single, essential, httpOnly session cookie to keep you logged in. We do not use advertising or tracking cookies.

5. Data Retention

We retain your account and business data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us; we will delete it within a reasonable timeframe except where retention is required by law.

6. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, or to object to certain processing. To exercise these rights, contact us at kelltechdbs26@gmail.com.

7. Children's Privacy

The Service is intended for business use by adults and is not directed to children under 13 (or the relevant age of digital consent in your region). We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Service or by email.

9. Contact

Questions about this Privacy Policy can be sent to kelltechdbs26@gmail.com.