Last updated: February 13, 2026

Your privacy matters to us. This policy explains what data we collect, how we use it, who we share it with, and the choices you have. We keep it straightforward.

1. Who We Are

Merch Madness ("we," "us," "our") operates the Merch Madness web platform. For the purposes of data protection law, we act as the data controller for creator account data and as a data processor for buyer information collected during transactions.

2. Data We Collect

Information you provide

Data type	When collected
Name, email, password	Account registration
Display name, profile details	Creator onboarding
Bank and identity details	Stripe payout setup (collected by Stripe)
Designs, vision descriptions	Merch creation sessions
Support messages, uploaded images	Support conversations
Social media account connections (platform name, account ID, display name)	Social account connection via OAuth

Information collected automatically

Data type	Purpose
Device type, OS version	App compatibility
Session tokens	Authentication
Usage patterns (screens visited, features used)	Platform improvement
IP address	Security and fraud prevention

Buyer data

When a buyer purchases a product, their name, shipping address, email, and payment details are collected by Stripe and our fulfillment partner to process and deliver the order. We do not store full payment card numbers.

3. How We Use Your Data

• Operate the Platform: Create and manage your account, process designs, generate mockups, and launch drops.
• Process payments: Route creator earnings through Stripe Connect and process buyer transactions.
• Fulfill orders: Share necessary buyer and order data with our production partner for manufacturing and shipping.
• Provide support: Respond to inquiries and resolve issues through our AI support system and escalation channels.
• Improve the Platform: Analyze usage patterns to enhance features, performance, and the creator experience.
• Auto-post to social media: Automatically publish drop and bundle announcements to your connected social media accounts using AI-generated, platform-specific content.
• Send notifications: Deliver sale alerts, drop updates, payout confirmations, and important service announcements.
• Maintain security: Detect and prevent fraud, abuse, and unauthorized access.
• Comply with law: Meet legal obligations including tax reporting and law enforcement requests.

4. Who We Share Data With

Partner	Data shared	Why
Stripe	Creator identity, bank details, transaction data	Payment processing, creator payouts, compliance
Fulfillment partner	Buyer name, shipping address, product details, design files	Manufacturing and shipping orders
AI services	Design prompts, vision descriptions (no personal data)	Design generation and conversational AI
Image hosting	Design images, support photos	Image storage and delivery
Email service	Email addresses, order details	Transactional emails and notifications
Social media integration	Social account tokens, post content, product images	Auto-posting drop announcements to your connected social platforms

We do not sell your personal data. We only share data as necessary to operate the Platform and fulfill orders.

5. Data Retention

• Account data: Retained while your account is active and for 30 days after deletion.
• Transaction records: Retained for 6 years to meet financial and tax reporting obligations.
• Design files: Retained while your account is active. Deleted upon account deletion unless associated with active orders.
• Support conversations: Retained for 12 months for quality and training purposes.
• Support images: Hosted with 24-hour expiration and not permanently stored.

6. Cookies and Sessions

We use session cookies to keep you signed in. These are essential for the Platform to function and cannot be disabled. We do not use advertising or third-party tracking cookies.

Our web pages may use minimal analytics to understand traffic patterns. No personally identifiable information is shared with analytics providers.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to update inaccurate or incomplete data.
• Deletion: Request that we delete your personal data, subject to legal retention requirements.
• Portability: Receive your data in a structured, commonly used format.
• Opt out: Unsubscribe from marketing communications at any time through account settings.
• Object: Object to certain types of data processing where permitted by law.

To exercise any of these rights, contact us at support@merchmadness.app. We will respond within 30 days.

8. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. When data is transferred outside your region, we ensure appropriate safeguards are in place, including standard contractual clauses where required by law.

9. Children's Privacy

The Platform is not intended for anyone under 18. We do not knowingly collect personal data from minors. If we become aware that a user is under 18, we will promptly delete their account and associated data.

10. Data Security

We implement technical and organizational measures to protect your data, including encrypted connections, secure session management, and access controls. For full details, see our Security Policy.

11. Business Transfers

If Merch Madness is acquired, merged, or sells assets, your personal data may be transferred as part of that transaction. We will notify you before your data becomes subject to a different privacy policy.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the app or by email. The "last updated" date at the top reflects the most recent revision.

13. Contact

Privacy questions or data requests? Reach us at support@merchmadness.app.