Know what is collected and why

• Identifiers: name, email, account and authentication identifiers, business name, and support contact details.
• Commercial and store information: products, catalog data, store configuration, domains, orders or test transactions, and service history.
• Billing information: subscription state and payment-method tokens from Stripe. StoreMason does not intend to store full card numbers.
• Internet and device activity: IP address, device/browser data, security events, logs, and—only with cookie consent—analytics interactions.
• Communications and content: support messages, appeals, uploaded files, and material you place in a workroom or storefront.
• Inferences: store type, setup status, fraud/risk indicators, and product or design suggestions derived from service activity.

We collect information from you, your authorized users, your device, service providers, and actions taken in StoreMason.

We use information to provide and provision the service; authenticate and secure accounts; prevent fraud and abuse; process test or separately authorized live billing; support users and decide appeals; personalize store setup; measure performance with consent; comply with law; and protect rights, safety, and platform integrity.

We disclose information as needed to vendors that provide authentication, hosting, databases, payments, security, communications, support, and consented analytics; to professional advisers; during a business transaction; or when required to comply with law and protect rights or safety. Providers may include Clerk, Railway, Stripe, Google Analytics (only after opt-in), and commerce infrastructure used to operate tenant storefronts.

StoreMason does not sell personal information for money and does not use personal information for cross-context behavioral advertising. If that practice changes, we will update this notice and provide legally required choices before doing so.

We keep information while an account is active and as reasonably needed for service delivery, security, dispute resolution, legal compliance, backups, and enforcement. Retention varies by record type. We use access controls, tenant isolation, encryption or hashing where appropriate, logging, and credential controls, but no system is completely secure.

You can manage analytics through Cookie settings and update certain account or billing details in the service. Depending on where you live, you may have rights to know/access, correct, delete, or receive a copy of personal information, and to limit or opt out of certain uses. California residents also have a right not to receive discriminatory treatment for exercising applicable privacy rights.

Submit a request to hello@storemason.com with the subject “Privacy request.” We will verify the request and may ask for information needed to match records. Authorized agents may submit a request with proof of authority. You may appeal a denied request by replying with “Privacy appeal.”

StoreMason is for business users age 18 or older and is not directed to children. Limited access is operated in the United States; information may be processed in the United States. We will post updates here and provide additional notice for material changes when required.

Privacy questions and requests: hello@storemason.com. Include “Privacy” in the subject line. Do not send passwords, card numbers, or other secrets by email.