Privacy Policy

Introduction

Simcha 11 ("we," "us," or "our") operates the website simcha11.com (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service.

Information We Collect

Personal Information

• Email address: Required for account creation, order processing, and delivery of your digital cards via email.
• Name (first and last): Collected when you create an account or sign up with Google. Used for account identification and personalization.
• User ID: Automatically generated unique identifier for your account.

Order Information

• Card selections: Which card design you choose, category, subcategory, and size preset.
• Custom text values: The personalized text you enter for your invitation (names, dates, venue, etc.).
• Payment information: We process payments through Stripe. We do not store your credit card details on our servers. All payment data is handled securely by Stripe in compliance with PCI-DSS standards.
• Order history: Records of your purchases, including order ID, date, and status.

Draft Information

If you save a draft of your card design, we store your selected card, custom text, and design preferences so you can return to complete your purchase later.

Technical Data

• Device and browser information: Collected through Vercel Analytics and Speed Insights to improve performance and user experience.
• IP address: May be collected for security and fraud prevention purposes.
• Usage data: Pages visited, time spent, and interactions to improve our Service.

How We Use Your Information

• Order fulfillment: Process your payments, generate your digital card files, and send download links via email.
• Account management: Create and maintain your account, allow you to access your order history and saved drafts.
• Communication: Send you order confirmations, download links, and important service updates.
• Improvement: Analyze usage patterns to improve our designs, user experience, and service performance.
• Security: Detect and prevent fraud, abuse, and security threats.
• Legal compliance: Comply with legal obligations and enforce our Terms of Service.

Third-Party Services

Firebase (Google)

We use Firebase for authentication, database, storage, and analytics. Firebase may collect data as described in their privacy policy: Google Privacy Policy

Stripe

We use Stripe to process payments. Stripe collects and uses payment information as described in their privacy policy: Stripe Privacy Policy

Resend

We use Resend to send transactional emails (order confirmations, download links). Resend may collect data as described in their privacy policy: Resend Privacy Policy

Vercel

Our website is hosted on Vercel, which uses Analytics and Speed Insights. Vercel may collect data as described in their privacy policy: Vercel Privacy Policy

Data Retention

• Account information: Retained as long as your account is active. You may request deletion at any time.
• Order history: Retained indefinitely to provide access to your past purchases and for business records.
• Guest orders: Guest checkout orders are retained for 30 days after purchase, after which they may be deleted.
• Drafts: Saved drafts are retained until you delete them or your account is deleted.
• Payment data: Payment transaction records are retained for legal and accounting purposes.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee its absolute security.

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to certain legal obligations.
• Portability: Request transfer of your data to another service.
• Objection: Object to our processing of your personal data.
• Restriction: Request restriction of how we process your data.

To exercise these rights, please contact us at orders@simcha11.com. We will respond within 30 days.

Account Deletion

You can delete your account at any time through the Account Settings page. Upon deletion, your personal information (name, email, user ID) will be permanently removed from our database. Your order history may be retained for business and legal purposes. If you wish to delete all data including order records, please contact us at orders@simcha11.com.

Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it immediately.

California Residents (CCPA)

If you are a resident of California, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know: Information about the categories of personal data we have collected about you.
• Right to delete: Request deletion of your personal data.
• Right to opt-out: Opt-out of the sale of your personal data (we do not sell personal data).
• Non-discrimination: We will not discriminate against you for exercising your privacy rights.

GDPR Compliance

If you are located in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):

• Lawful basis: We process your data based on contract performance (order fulfillment), legal obligation, and legitimate interests (service improvement).
• Data transfers: Your data may be transferred to and processed in the United States and other countries where our service providers operate.
• Data protection officer: You may contact our designated representative for GDPR inquiries at orders@simcha11.com.

Cookies and Tracking

We use the following types of cookies and tracking technologies:

• Essential cookies: Required for the Service to function properly (authentication, session management).
• Analytics cookies: Used by Vercel Analytics and Firebase Analytics to understand how visitors use our Service.
• Performance cookies: Used by Vercel Speed Insights to monitor and improve page load performance.

You can control cookie settings through your browser preferences. Note that disabling certain cookies may affect the functionality of the Service.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us:

• Email: orders@simcha11.com
• Website: https://www.simcha11.com