Privacy Policy

1. Information We Collect

We collect only the information necessary to provide the services you request. This includes:

• Account Information: When you create an account or sign in using Google/Firebase we receive basic account details (for example: name, email, and profile picture) required to manage your account.
• Order & Shipping Details: When you place an order we collect the information required to fulfill it (shipping address, billing address, contact phone, and any customization metadata you provide). This data is stored in our Firestore database as part of an order record.
• Payment Confirmation: We do not store full payment card details. Payments are processed by Razorpay and we retain only payment confirmations and non-sensitive metadata (order id, payment id, status) needed for reconciliation and customer support.
• Designs & Files: If you upload custom designs or images we store the files in Sanity (or transfer them to a storage service) and keep references (URLs) in the order record. We avoid storing large base64 data URLs in Firestore; only small metadata and stable asset references are saved.
• Notifications: We use Telegram to send order notifications to our internal admin channel; when we do, we may attach design files or order snapshots for fulfilment. These notifications are operational and not used for marketing.
• Cookies & Usage Data: We use cookies and similar technologies to manage sessions, keep items in your cart, remember preferences, and for analytics. See the Cookies section below for details.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate you via Firebase.
• Process orders, coordinate shipping, and deliver products you purchase.
• Reconcile payments and orders with Razorpay using server-side snapshots and verify endpoints.
• Store uploaded designs in Sanity and include them in operational notifications (Telegram) to fulfill orders.
• Respond to your inquiries and provide customer support.
• Improve our site and debug issues using non-invasive operational logs; we do not use logs to build user profiles for sale or advertising.

3. How We Store and Protect Your Data

Your account and order information is stored in Google Firebase / Firestore under our project. We store only the metadata necessary for each order; large binary assets (design files) are stored in Sanity and referenced by URL. Sensitive payment details are handled entirely by Razorpay and are not stored on our servers.

We use reasonable administrative, technical, and physical safeguards to protect your personal data. Access to production databases and tokens is limited to authorized personnel. However, no service can guarantee 100% security; if you suspect a security issue, contact us immediately.

4. Cookies and Similar Technologies

We use cookies and local storage to provide core functionality:

• Session Cookies: Required to keep you signed in and to authenticate server requests. These are issued by Firebase (session cookies) and by our site to manage session state.
• Cart Cookies / Local Storage: We keep your cart contents across pages and browser sessions to improve the shopping experience.
• Analytics: We may use analytics tools to understand usage patterns and improve the product. This data is aggregated and not used to identify you personally for advertising purposes.

Cookies used by third parties (for authentication or payment) are governed by those providers' privacy policies (e.g., Google, Razorpay). We do not share cookies between services; cookies set by third parties are controlled by those third-party domains.

5. Sharing and Disclosure

We do not sell your personal information. We share data only with trusted third-party providers who perform services on our behalf and only to the extent necessary to provide the service (for example: Razorpay for payments, Firebase for auth and storage, Sanity for assets, and Telegram for operational notifications).

We may also disclose information where required by law, to protect our rights, or to respond to lawful requests by public authorities.

6. Data Retention

We retain account and order information for as long as needed to provide our services, to comply with legal obligations, resolve disputes, and enforce our agreements. If you wish to request deletion of your account and associated data, contact us at the address below; we will process your request in accordance with applicable law.

7. Your Rights and Choices

You may access, update, or delete your account information by signing in and editing your profile or by contacting us. You can also clear cookies from your browser to remove stored session/cart data; note this may affect your site experience.

8. Contact Us

If you have questions or comments about this Privacy Policy, or wish to exercise your data rights, please contact us at help@mcutfactory.com.