1. Information We Collect

We collect account information (name, email, password hash), usage data (IP address, browser type, pages visited), build data (parts selected, builds saved), partner and API data (business information, product catalog, API usage logs), and communications when you contact us.

2. How We Use Your Information

We use collected information to provide and improve the Service, authenticate accounts, save builds and preferences, process partner subscriptions, send transactional emails, analyze usage trends, and detect fraud or abuse.

3. Partner Portal and API Data

Product data submitted via CSV or API is stored and used to power your embed widgets. API keys are stored securely. We may collect anonymized usage data from embed widgets. Payment details are processed by our third-party payment processor — we do not store full credit card numbers.

4. Sharing of Information

We do not sell your personal information. We may share your information with trusted service providers (Vercel, Supabase, Paddle), when required by law, or in the event of a business transfer. We may share with third-party retailers when you click affiliate links.

5. Data Retention

Account data is retained until you request deletion. Build data is retained as long as your account exists. Partner product data is retained for the duration of your subscription and a reasonable period after. API usage logs are retained for up to 12 months.

6. Data Security

We implement industry-standard security including HTTPS encryption, hashed passwords, encrypted API key storage, row-level security policies, and access controls. No method of transmission is 100% secure.

7. Your Rights

You may request access to, correction of, deletion of, or a portable copy of your personal data. Contact us at contact@assemblear.com. We will respond within 30 days.

8. Cookies

We use essential cookies (required for session management), analytics cookies (to understand usage), and preference cookies (to remember settings). You can control cookies through your browser settings.

9. Children's Privacy

Our Service is not directed at children under 13. Users must be at least 21 years of age consistent with our Terms of Service.

10. California Privacy Rights (CCPA)

California residents have the right to know what personal information we collect, the right to delete it, and the right to opt out of its sale. We do not sell personal information. Contact us at contact@assemblear.com to exercise your rights.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

For questions about this Privacy Policy: contact@assemblear.com · Assemble Outdoors LLC