Privacy

1. What we collect

• Account information: your name, email address, and how you sign in.
• Organisation information: the company or individual account you belong to, your role in it, and who invited you.
• Designs and uploaded artwork: the colours, patterns and logo or text you place on a pair, and any image file you upload for a logo.
• Shipping address and phone: collected at order time, so the wearer’s pair reaches them and the carrier can reach them if there is a problem with delivery. Kept for fulfilment; see “How long we keep it” below for when they are removed.
• Payment information: handled entirely by Stripe, our payment processor — your card details are entered on Stripe’s own hosted page and never touch Koobz systems. Koobz never stores a card number.
• Technical logs: ordinary server logs (IP address, timestamps, error traces) kept for security and debugging.

2. Designing and ordering without an account

You can design a pair and order it without making a Koobz account. Here is what we keep when you do.

• Your guest session. When you start designing without an account, we set our ordinary session cookie (koobz_session) on your device. It ties the designs you make to that device. It lasts 30 days, and each visit starts the 30 days again. A guest account has no name or password, and no email until you pay.
• Your designs. The designs you make as a guest are stored on our servers, the same as an account’s designs, so the designer, the price and the checks work the same way.
• The email you give at payment. A guest order asks for an email address when you pay. We use it for three things only: your receipt (we pass it to Stripe, our payment processor, which sends the receipt), the emails about that order (placed, accepted or rejected, shipped), and the links to track it. We do not use it for a newsletter. Each order keeps the email it was paid with.
• Tracking links. Each order email carries a private link to a page that shows your order’s progress, what you ordered, and a shortened delivery address (an initial, the city, the state and the ZIP code). A link works for 90 days. Anyone you forward it to can see that page, so forward it only to people you trust. If a link has stopped working, you can ask for a new one by email from the page itself.
• Links to set a password. You can ask us to email you a link that turns your guest orders into a Koobz account. That link works once, for 60 minutes. Only the inbox you paid with receives it.
• When we remove guest data. If a guest session has not been used for 30 days and has no order (other than one that was never paid, or was cancelled), we delete its designs, its unpaid or cancelled orders, its session and its guest account. Uploaded logo files are stored by their content and are not tied to a person, so they are not part of this deletion. Paid orders are kept as transaction and manufacturing records, as described in “How long we keep it”.
• Text remembered in your browser. To open your designs faster, your browser keeps the shapes we worked out for the text you typed on a pair, in its own local storage on your device. Signing out, or “Forget this device”, clears it.

3. Why we collect it

To run your account and your organisation’s account, to build and ship the pairs you order, to charge the right card for the right order, to answer support requests, and to meet our own tax and accounting obligations.

4. How long we keep it

Account and organisation records are kept for as long as the account exists. Orders, designs and their artwork are kept as transaction and manufacturing records even after an account is deleted (see “Your rights” below) — the factory and our books need the order, not the person. Uploaded artwork is stored by its content hash and is no longer tied to any person once its owner’s account is deleted. A completed order’s shipping address and phone are redacted the moment its wearer’s account is deleted; an order still being built or shipped keeps its shipping details until it reaches that point.

5. Sharing

We do not sell your personal information. We share it only with the service providers who make an order possible: Stripe (payment), our email provider (Resend), our shipping carriers, and our own factory partner (to build and ship what you designed) — and when the law requires it.

6. Your rights (California residents, CCPA/CPRA)

• Right to know what we hold about you — use “Download my data” on your account page for a copy.
• Right to delete your account — use “Delete my account” on your account page.
• Right to correct inaccurate information we hold about you.
• Right to non-discrimination for exercising any of the above.
• We do not sell or share personal information for cross-context behavioural advertising, so there is nothing to opt out of.

Exercise any of these rights from your account page, or through our contact form. This policy is governed by California law.