Privacy Policy

1.1 Information You Provide

• Account information via X (Twitter) OAuth: username, display name, profile picture, banner image
• Store details: store name, subdomain, contact email, currency preference
• Profile information: bio, follower count, top posts, metrics
• Product listings: titles, descriptions, images, pricing
• Social interactions: follows, shoutouts, picks
• AI Page Builder prompts and saved builds

1.2 Information Collected Automatically

• Device and browser information (user agent, screen resolution)
• IP address and approximate geolocation
• Pages visited, features used, and interactions with the Service
• Cookies and similar tracking technologies

1.3 Information from Third Parties

• X (Twitter): public profile data, follower/following counts, public posts (via X API v2)
• xAI/Grok: AI-generated profile enhancements, theme recommendations
• Stripe: payment confirmation and transaction status (we do not store credit card numbers)
• Printful: order fulfillment status for print-on-demand products

• To create and manage your account and Store
• To display your public storefront and profile
• To process transactions and facilitate payments via Stripe
• To operate social features (follows, shoutouts, picks)
• To power the AI Page Builder (prompts are sent to Anthropic for processing)
• To send notifications about your Store, orders, and account
• To enforce our Terms of Service and EULA
• To improve the Service and develop new features
• To detect and prevent fraud, abuse, and security incidents

We do not sell your personal information. We share information only in these circumstances:

• Public Display: Your store name, X username, profile picture, bio, products, shoutouts, and picks are publicly visible
• Service Providers: X (authentication), Stripe (payments), Printful (fulfillment), Anthropic (AI), xAI (profile enhancement), Vercel (hosting)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you explicitly authorize sharing

Your data is stored on servers hosted by our infrastructure providers. We implement reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), secure authentication, and access controls. However, no method of transmission over the internet is 100% secure.

We retain your data for as long as your account is active or as needed to provide the Service. After account deletion:

• Your Store and profile are removed from public view
• Transaction records are retained as required by law (typically 7 years)
• Anonymized analytics data may be retained indefinitely
• AI Page Builder prompts are not stored beyond the active session

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Delete your personal data (by deleting your account)
• Export your data (builds via Page Builder export; other data via email request)
• Object to certain processing activities
• Withdraw Consent where processing is based on consent

To exercise these rights, contact legal@rareimagery.net.

We use cookies and similar technologies for:

• Essential cookies: Authentication session, CSRF protection
• Functional cookies: Theme preferences, language settings
• Analytics cookies: Understanding Service usage and performance

You can control cookies through your browser settings, though disabling essential cookies may prevent you from using the Service.

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly. Users aged 13-17 must have parental or guardian consent.

Your information may be transferred to and processed in countries other than your own, including the United States. By using the Service, you consent to such transfers. We ensure appropriate safeguards are in place for international transfers.

California residents have additional rights under the CCPA, including the right to know what personal information is collected, the right to deletion, and the right to opt-out of the sale of personal information. We do not sell personal information.

If you are in the European Economic Area (EEA), you have rights under GDPR including access, rectification, erasure, restriction of processing, data portability, and the right to lodge a complaint with a supervisory authority. Our legal bases for processing include consent, contract performance, and legitimate interests.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or platform notification at least 14 days before changes take effect. The "Last Updated" date at the top reflects the most recent revision.

For privacy-related questions or to exercise your rights:

RareImagery
Email: legal@rareimagery.net
Website: https://rareimagery.net