Privacy notice

SellerKit (legal entity and business address to be completed before launch) (“SellerKit”, “we”, “us”) provides a hosted seller page and downloadable marketing materials. This notice explains what we collect, why we collect it, and the choices sellers and visitors have.

What we collect

• Account details: your email address, sign-in tokens, and account role. Sign-in links are single-use and expire.
• Kit content: your business name, display name, category, introduction, links, phone or email contact details you choose to publish, theme settings, uploaded logo or portrait, and public address.
• Billing details: Stripe customer and subscription identifiers, plan status, renewal dates, and invoice metadata. Card details are entered on Stripe’s hosted checkout and are never sent to or stored by us.
• Operational data: generated print files, file-generation errors, security and rate-limit records, audit events, and aggregate page interactions.
• Visitor interactions: page visits, primary-link clicks, contact-link clicks, and save-contact downloads. These are stored as daily counters, not as a visitor-level profile. We do not use cross-site advertising identifiers.

What is public

Your seller page is public. The business name, display name, introduction, logo or portrait, links, and any phone number or email address you enable are visible to anyone with the page address. Your account email is private unless you add it as a public contact link. Your street address is not requested or published by default.

If you opt out of search indexing, we add a noindex directive to the page. That does not make the page private; anyone with the link can still open it.

Why we use it

• To create, host, and display your seller page.
• To generate and deliver your print files and QR code.
• To authenticate you, prevent abuse, and keep the service secure.
• To manage your plan, renewals, and billing support.
• To understand aggregate product usage and improve the service.
• To comply with legal obligations and enforce our terms.

Service providers

We use service providers for hosting and storage, transactional email, and payments. A current launch configuration uses Stripe for billing and Resend for email delivery. These providers process data on our behalf under their own terms and security commitments. We do not sell personal information or share it for cross-context behavioral advertising.

Cookies and local storage

We use a small number of first-party cookies: a secure session cookie for signed-in sellers, a draft cookie so an anonymous preview can be resumed, and short-lived security cookies where needed. We do not set advertising cookies.

Retention

Anonymous drafts expire after a period of inactivity. Account and page data is kept while the account is active and for a limited retention period after a plan expires so a seller can reactivate the same address. Billing and tax records may be retained longer where required. When you delete your account, we remove or anonymize personal data and retire the public address so it is not reassigned. Backups may persist for a limited operational period. The exact retention schedule must be completed before launch.

Your choices and rights

• Edit or hide public content from the seller dashboard.
• Export your account and kit data from the account settings.
• Delete your account from the account settings, subject to legal retention needs.
• Opt out of search indexing on your seller page.
• Contact support@kituwa.com to request access, correction, or deletion, or to ask a privacy question.

Security

We use HTTPS, hashed session and sign-in tokens, server-side access checks, rate limits, restricted uploads, and private storage for unpublished files. No system is perfect. If you believe you have found a security issue, please contact us at support@kituwa.com.

Changes

We may update this notice as the service evolves. Material changes will be communicated through the product or by email where appropriate.

See also the terms of service.