Privacy Policy

Account information: When you register, we collect your email address and username.

Payment information: Payment card details are collected and processed directly by Stripe. We never see or store your full card number. We store only a Stripe customer ID and the outcome of payment transactions.

Payout information: If you connect a bank account for cashouts, Stripe collects and stores your banking details. We store only a Stripe Connect account ID.

Shipping address: If you request physical card delivery, we collect your name and mailing address.

Usage data: We may collect standard server logs including IP address, browser type, pages visited, and timestamps for security and debugging purposes.

We use your information to: (a) create and manage your account; (b) process pack purchases and credit your balance; (c) process cashout payouts via Stripe Connect; (d) ship physical cards to your address; (e) send transactional emails such as order confirmations; (f) detect and prevent fraud; (g) comply with legal obligations.

We do not sell your personal information to third parties. We do not use your data for targeted advertising.

We use the following third-party services that may process your data:

• Stripe — payment processing and Connect payouts. Subject to Stripe's Privacy Policy.
• Supabase — database and authentication hosting. Data is stored on servers in the United States.
• Resend — transactional email delivery (order confirmations).
• Vercel — web hosting and infrastructure.

We retain your account data for as long as your account is active. Transaction records are retained for 7 years to comply with financial record-keeping requirements. Shipping addresses are retained until you delete them from your account settings or request deletion.

You may request deletion of your account and associated personal data at any time by emailing support@cloutpacks.com. Note that we may retain certain records where required by law or for fraud prevention.

CloutPacks uses only essential cookies required for authentication (session tokens stored in your browser's local storage via Supabase Auth). We do not use tracking cookies or third-party analytics cookies.

We implement industry-standard security measures including HTTPS encryption, database-level row security policies, and access controls. However, no system is 100% secure. You are responsible for keeping your account password confidential.

CloutPacks is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If we become aware that a minor has provided us personal information, we will delete it promptly.

Depending on your location, you may have rights to: access the personal data we hold about you; correct inaccurate data; request deletion of your data; object to certain processing; and data portability.

To exercise any of these rights, contact us at support@cloutpacks.com. We will respond within 30 days.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice. The “last updated” date at the top of this page reflects the most recent revision.

For privacy questions or requests, contact us at support@cloutpacks.com.