Privacy Policy

1. Data We Collect

• Account data: name, email address
• Order data: shipping address, phone number, payment status
• Uploaded content: photos of drawings
• Technical data: browser type, IP address (via server logs)

2. Why We Collect It

• To process and deliver your orders
• To send order confirmation and shipping updates
• To provide customer support
• To improve our service

3. Third-Party Services

We share necessary data with the following processors:

• Stripe — payment processing (card details never touch our servers)
• Sendcloud — shipping label creation and tracking
• Supabase — database and file storage (EU region)
• Resend — transactional email delivery
• Vercel — website hosting

4. Data Retention

Order data is retained for 3 years for warranty and legal purposes. Uploaded drawings are stored for the duration of production and up to 12 months after delivery, then deleted unless you request earlier removal.

5. Your Rights (GDPR)

If you are located in the EU/EEA, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to processing

To exercise these rights, email info@mimoria.io. We respond within 30 days.

6. Cookies

We use essential cookies for authentication and session management only. We do not use advertising or tracking cookies.

7. Security

All data is transmitted over HTTPS. Payments are handled by Stripe (PCI-DSS Level 1 certified). Database access is restricted to authorized personnel only.

8. Contact

Data controller: Mimoria. For privacy-related questions, contact info@mimoria.io.