Privacy Policy & Data Protection

The collected data is used exclusively for the following purposes:

• Core functionality and logistics: Address and contact data are essential to process, prepare, and ship physical orders to the user's address.

• Product customization: Logos and designs uploaded by the user are temporarily stored to be printed on requested products (e.g., custom cups).

• Order and payment management: Payment receipts are used by our admin team to manually verify bank transactions and update the order status (e.g., from "waiting for payment" to "paid").

• Account maintenance: To keep the user session active, manage their saved address book, and allow order history lookups.

We do not sell, rent, or trade your personal information. Data is only shared with the following technical infrastructure strictly necessary for the app to function:

• Database and Storage Services (Supabase): All user information (profiles, addresses, orders) and multimedia files (logos, receipts) are securely transmitted and stored on Supabase servers, our database, authentication, and cloud storage provider.

• Payment processing: The application does not directly process credit or debit cards and does not use automated third-party payment gateways (like Stripe or PayPal). Payments are made via external bank transfers manually reported by the user, so we do not collect or share sensitive financial information.

We implement technical security measures to protect your information against unauthorized access:

• Secure connections: All data transfers between the app and our servers use encrypted communication protocols (HTTPS / SSL).

• Robust authentication: We use security JSON Web Tokens (JWT) that automatically refresh to validate that only the account owner can access and modify their information.

• Restricted access policies: The database features Row Level Security (RLS) policies, guaranteeing each user only has permission to view, edit, and interact with their own records and files.

The user has the full right to request the deletion of their account and data at any time.

Deletion process: Within the app, in the profile menu, there is an option enabled to request the permanent deletion of the account.

What happens when the account is deleted? • Personal data deletion: All data identifying the user is permanently deleted, including email, phone number, shipping addresses, and full name. • File deletion: All images associated with the user (profile pictures, designs, logos, and payment receipts) are permanently deleted. • Unlinking: The connection and access via identity providers (such as Google authentication) are removed. • History anonymization: To ensure the integrity of our accounting and logistics database, the generated order history is not deleted. Instead, the profile status is set to "deleted" and the personal information associated with those orders is replaced by default anonymous values, ensuring the order can never be linked back to the user's real identity.

If you have any questions, doubts, or requests regarding this Privacy Policy or the handling of your data, you can contact the developer, Fernando Camba, by sending an email to: mexicanadevasosimpresos@gmail.com