Privacy Policy

This Privacy Policy explains how Underbase collects, uses, and shares information when you use underbase.com and related shop tools. It covers shop owners and staff, and people who pay or comment on a public order link. It does not replace the privacy policy a shop gives its own customers.

We collect:

• Account data: name, email, shop name, and authentication records.
• Shop operations data: clients, artwork, mocks, gang sheets, orders, comments, and pricing settings you store in the Service.
• Payment data: Connect account status and payment identifiers. Card numbers are collected by Stripe, not by us.
• Technical data: device, browser, IP address, and basic logs needed to keep the Service up and secure.
• Communications: messages you send to hello@underbase.com or through the contact form.

• Provide, secure, and improve the Service.
• Authenticate you and send transactional email (sign-in codes, invites, order notices).
• Process payments you initiate, including the 2.99% application fee on customer-to-shop card charges.
• Prevent fraud, abuse, and tenancy leaks.
• Comply with law and payment-network rules.

We do not sell your personal information.

We use vendors who process data on our instructions. The current set includes:

• Vercel — hosts the application.
• Supabase — authentication and database.
• Stripe — card payments and Connect onboarding.
• Resend — transactional email.
• Cloudflare (including R2 and Turnstile) — file storage and bot protection.

Stripe’s use of payment data is described in the Stripe Privacy Policy.

A shop can send a customer a public order link. Anyone with that link can view the order the shop chose to share and, where enabled, approve, pay, or comment. Treat the link like a secret. We identify public commenters by the name and email they submit on that page.

We keep account and shop data for as long as the shop is active and as long as we need it for backups, disputes, and legal retention. You may request deletion of a shop account by emailing hello@underbase.com. We may retain records required by payment networks or law.

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to certain processing. Email hello@underbase.com. We will need enough information to find your account and will not honor a request we cannot verify.

The Service is for businesses, not for children under 18. We do not knowingly collect personal information from children.

We will post updates on this page and change the date above. Continued use after an update means you accept the revised policy.

Underbase — hello@underbase.com. See also our Terms of Service and Cookie Policy.