Privacy Policy

1. Information we collect

When you create an account, subscribe, or contact us, we collect information such as:

• Account information — your name and email address, and, if you sign in with Google or Apple, the basic profile information those providers share with us.
• Shipping information — your mailing address, used to fulfill your box.
• Payment information — our payment processor, Stripe, collects and stores your card details on our behalf. SweetAtlas never receives or stores your full card number.
• Order and subscription history — your plan, billing dates, and shipment status.
• Communications — messages you send us, e.g. by email.
• Usage data — basic technical data such as browser type and pages visited, collected automatically to keep the Service secure and working.

2. How we use your information

• To create and maintain your account and authenticate you when you sign in.
• To process payments and fulfill and ship your subscription box.
• To send you transactional emails about your account and orders — for example, a welcome email, order and payment confirmations, shipping notices, billing reminders, and payment-failure notices.
• To provide customer support.
• To detect, investigate, and prevent fraud and abuse.
• To comply with legal obligations, such as tax and accounting recordkeeping.

We do not sell your personal information.

3. Who we share information with

We share information only with service providers who help us run SweetAtlas, and only as needed for the purposes above:

• Stripe — payment processing and subscription billing.
• Supabase — account authentication and secure storage of your account and order data.
• Resend — delivery of transactional emails.
• Shipping carriers — to deliver your box, we share your name and shipping address with the carrier fulfilling your order.

We may also disclose information if required by law or to protect the rights, property, or safety of SweetAtlas, our customers, or others.

4. Cookies

We use essential cookies required to keep you signed in and to operate the Service. We do not currently use third-party advertising cookies.

5. Data retention

We retain your account and order information for as long as your account is active and for a reasonable period afterward to comply with legal, tax, and accounting requirements, resolve disputes, and enforce our agreements.

6. Your choices and rights

You can review and update your account information at any time by signing in to your account. You may request that we delete your account and associated personal information, or request a copy of the information we hold about you, by emailing contactus@mysweetatlas.com. Depending on your state of residence, you may have additional rights under laws such as the California Consumer Privacy Act; we will respond to verified requests consistent with applicable law.

7. Children's privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

8. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect.

9. Contact

Questions about this Privacy Policy can be sent to contactus@mysweetatlas.com.