This policy explains what personal information [Legal entity name] (“Merch.link”) collects when you use merch.link, how we use it, and the choices you have.
What we collect
- When you buy: your name, email, shipping address, phone number if you give it, and what you ordered. Card details go straight to Stripe; we never see or store your full card number.
- When you run a store: your name, email, login details, store name, profile and header images, links, designs, and payout details (your Stripe account).
- When you contact us: what you send, including any photos.
- Automatically: device and browser details, IP address, pages viewed and similar usage data, and error reports. Analytics and session recording run only if you agree to them (see below).
How we use it
- To process, print, ship and support your orders, and send order emails.
- To run stores, calculate profits and pay sellers.
- To calculate and remit sales tax, keep financial records, and meet tax and legal duties.
- To prevent fraud and keep the site secure.
- To understand how the site is used and improve it.
We don't sell your personal information.
Who we share it with
We share information only with service providers that help us run Merch.link:
- Stripe (payments, tax calculation and payouts)
- Scalable Press (printing and shipping; receives your name and shipping address)
- Supabase (database and logins) and Vercel (hosting)
- Resend (email) and Help Scout (support inbox)
- Sentry (error reports)
- Google Analytics and FullStory (analytics, only with your consent)
Sellers see the details needed for their own sales, such as what was ordered. We may also share information if the law requires it, to protect rights and safety, or as part of a sale of the business.
Analytics, session recording and cookies
We use essential cookies to keep you logged in and remember your cart. With your consent, we also use Google Analytics and FullStory. FullStory records how you use pages (clicks, scrolling and typing in non-sensitive fields) so we can find problems. Payment and address fields are masked and never recorded. If you're logged in, FullStory links the recording to your account ID, email and store. You can change your choice at any time from the cookie settings link in the footer.
How long we keep it
We keep order and payout records as long as tax and accounting laws require (generally up to 7 years). We keep account information while your account is open and delete or anonymize it after you close it, except what we must keep. Analytics data is kept for a limited period set in each tool.
Your choices and rights
You can update your account details at any time. You can ask us to access, correct or delete your personal information, or to send you a copy, by emailing privacy@merch.link. Depending on where you live (for example California under the CCPA), you may have additional rights, including the right to know what we collect and to not be discriminated against for using your rights. We'll verify your request before acting on it.
Children
Merch.link isn't meant for children under 13, and we don't knowingly collect their information.
Security
We use encryption in transit, access controls and trusted providers to protect your information. No system is perfectly secure, so please tell us if you think your account has been compromised.
Changes and contact
We'll post any changes here and update the date above. Questions? Email privacy@merch.link or write to [Legal entity name], [Mailing address].