Privacy policy

Last updated 30 October 2026. What we collect, why, and who else sees it. We collect what we need to run a store and no more.

What we collect

• Store owners: your name for the business, email address, logo, the store details you enter, the date and version of the terms you accepted, and the IP address you accepted them from.
• Customers: name, email, shipping address and order details, so we can fill the order and send updates. Card details go straight to Stripe. We never see or store your full card number.
• Everyone: basic technical data such as IP address and browser, in server logs and in our abuse checks (for example, how many stores one connection has started today).
• Reports: if you report a store, what you write and, if you give it, your email.

Why we use it

To run the stores, take payment, print and ship orders, pay store owners their share, keep the service safe (stopping spam, fake stores and misuse), and answer you. We don't sell personal information, and we don't use customers' details to market to them.

Who else sees it

• Stripe takes payments.
• Printful prints and ships orders, so it gets the shipping name and address.
• Resend (or a similar service) sends our emails.
• Cloudflare may run a spam check on the sign-up form (Turnstile).
• Anthropic may be sent a store's name and logo so an automated tool can check it for explicit content, hate symbols and other people's trademarks.
• The store owner sees the orders placed in their store, including what's needed to fulfil them.
• Anyone the law requires us to tell.

[for review: confirm the full list of service providers and where their servers are.]

How long we keep it

Order records are kept for as long as tax and accounting rules require [for review: period]. Abuse-check counters reset daily. Reports are kept as long as we need them to act on them and to spot repeat problems.

Your choices

You can ask to see, correct or delete your personal information by emailing hello@aiconceptshq.com. We'll say so if we have to keep something for legal reasons. If you're in Canada, you can also complain to the Office of the Privacy Commissioner of Canada.

Cookies

We use one cookie to keep you signed in (owners and admins) and one to hold your cart. We don't use advertising cookies.

Children

merchpuppy isn't meant for children under 13, and we don't knowingly collect information from them.