Privacy Policy

1. What Data We Collect

When you use Verse Vinyl, we may collect the following personal information:

• Account information — your name and email address when you register for an account.
• Payment information — processed securely by Stripe. We do not store your card details on our servers.
• Order details — the products you purchase, delivery addresses for print orders, and order history.
• Poster customisation data — song selections, style choices, and uploaded images used to create your poster.
• Usage data — anonymous analytics collected via Vercel Analytics to help us improve the service.

2. How We Use Your Data

We use your personal data to:

• Create and manage your account.
• Process orders, generate posters, and fulfil print deliveries.
• Send order confirmations and dispatch notifications via email.
• Provide customer support.
• Improve our products and website experience.

We will never sell your personal data to third parties or use it for unsolicited marketing.

3. Third-Party Services

We use trusted third-party services to operate Verse Vinyl. These services only receive the data necessary to perform their function:

• Stripe — payment processing. Stripe handles all card data under their own PCI-compliant privacy policy.
• Prodigi — print fulfilment. Delivery addresses and poster files are shared with Prodigi to produce and ship print orders.
• Resend — transactional email. Your email address is used to send order confirmations and dispatch notifications.
• Supabase — database hosting and file storage for generated poster images.
• Vercel — website hosting and anonymous analytics.
• Sentry — error monitoring to help us identify and fix technical issues (no personal data is intentionally collected).

4. Cookies

Verse Vinyl uses a minimal number of cookies for essential functionality:

• Session cookie — managed by NextAuth to keep you signed in. This cookie is strictly necessary and does not track you across other websites.
• Local storage — used to save your poster draft so you can return to it later. This data stays in your browser and is not sent to our servers.

We do not use advertising or tracking cookies.

5. Data Retention

We retain your account and order data for as long as your account is active or as needed to provide our services. Generated poster files are stored for a reasonable period to allow re-downloads. Download tokens expire after 7 days. If you delete your account, we will remove your personal data within 30 days, except where we are legally required to retain it.

6. Your Rights

You have the right to:

• Access your personal data — request a copy of the data we hold about you.
• Correct inaccurate data — update your account details at any time.
• Delete your data — request that we remove your account and associated data.
• Export your data — receive your data in a portable format.

To exercise any of these rights, please contact us at hello@versevinyl.com.

7. Contact

If you have any questions about this privacy policy or how we handle your data, please contact us at hello@versevinyl.com.