Privacy Policy

1. What we collect

• ·Account information: name, email address, company name, and password (hashed, never stored in plain text).
• ·Business details: address, tax ID, banking information for payouts. Stored encrypted at rest.
• ·Product data: listings, pricing, images, and inventory that Brand Partners submit.
• ·Usage data: pages visited in the portal, actions taken, and session metadata for security purposes.

2. How we use it

• ·To operate the platform and process orders on behalf of Brand Partners.
• ·To calculate and process payouts via Stripe.
• ·To send transactional emails (order notifications, payout confirmations, policy updates).
• ·To improve the platform through aggregated, anonymised analytics.
• ·We do not sell Brand Partner data to third parties. Ever.

3. Data sharing

• ·Stripe: to process payouts. Stripe is PCI-DSS Level 1 certified.
• ·Analytics providers: anonymised usage data only.
• ·Legal authorities: only if required by law and with appropriate legal process.

4. Data retention

We retain account data for the duration of the partnership plus 3 years, or as required by applicable tax and financial regulations. You may request deletion of non-legally-required data at any time by emailing brands@bluesarah.app.

5. Security

All data is transmitted over TLS 1.3. Sensitive fields (banking details, tax IDs) are encrypted at rest using AES-256. Access to production systems is restricted to authorised personnel with MFA enforced.

6. Your rights

• ·Access: request a copy of the data we hold about you.
• ·Rectification: correct inaccurate data.
• ·Erasure: request deletion of non-legally-required data.
• ·Portability: receive your data in a machine-readable format.
• ·To exercise any of these rights, email brands@bluesarah.app.

7. Cookies

The brand portal uses session cookies for authentication only. No tracking cookies or third-party advertising cookies are used.

8. Contact

For privacy-related questions, contact us at brands@bluesarah.app. We aim to respond within 5 business days.