Privacy Policy

We collect the following personal information when you interact with our website:

• Email address — when you join our VIP list, place an order, purchase music, or contact support.
• Full name — when you place an order or contact our support team.
• Shipping address — when you place an order for physical products (street address, city, postal code, country, phone number).
• Order and payment information — transaction amounts, product selections, and order status. Payment card details are handled entirely by Stripe and are never stored on our servers.
• Account credentials — if you create an account, your email and encrypted password are managed by Supabase Auth.
• Product reviews — your display name, star rating, review text, and any photos or videos you voluntarily upload.
• Support messages — your name, email, order ID, and the message content when you contact us for support.
• AI chat conversations — messages you send to our AI assistant, and its replies, are saved so the conversation can pick up where you left off if you come back. If you're signed in, this history is linked to your account; otherwise it's linked to an anonymous browser identifier.
• General site activity — while you're browsing, we track that a visitor (identified only by an anonymous browser identifier, plus your email if you're signed in) is currently on the site and which page they're on. This is not stored after your visit ends — it exists only for the duration you're active on the site.
• Vault / Gold access requests — if you request access to Gold-tier content, we record that request against your account.
• Referral activity — if you use or share a referral code, we record which account referred which, so credits can be applied correctly.

We do not collect sensitive personal information such as government IDs, financial account numbers, or health data.

We use your personal information only for the following purposes:

• To process and fulfill your orders, including contacting you about order status and shipping updates.
• To send VIP early-access notifications if you have signed up for our VIP list.
• To issue and deliver music licenses and download links after a purchase.
• To respond to support requests and resolve issues with your orders.
• To display reviews you have submitted on product pages (your display name is shown; your email is not).
• To comply with legal obligations and protect against fraudulent or unauthorized activity.
• To power our AI assistant's responses to your questions, and to let our team review AI conversations that get escalated to a person.
• To let administrators see current site activity in real time, and manage manufacturer payouts, disputes, and Vault access requests.

We do not use your information for automated decision-making or profiling.

We share your personal information with third parties only as necessary to fulfill your order or provide our services:

• Printify (order fulfillment) — your name, email address, and shipping address are transmitted to Printify, our print-on-demand manufacturer, solely to produce and ship the physical products you ordered.
• Stripe (payment processing) — your email and order total are shared with Stripe to process your payment. Stripe is PCI-DSS compliant; we never see or store your card number.
• Supabase (database and authentication) — your account data and order records are stored securely in Supabase's cloud database in compliance with their security standards.
• AI providers (Anthropic, and Google via Lovable AI Gateway) — messages you send to our AI assistant, along with relevant account or order details needed to answer your question, are transmitted to these providers solely to generate a response. Handling of that data is governed by each provider's own API terms and privacy policy.

We do not sell, rent, or trade your personal information to any third party for marketing purposes. We do not share your data with advertisers, data brokers, or analytics companies.

We use only essential cookies required for the website to function (session management and authentication). If you use our cookie consent banner to accept analytics cookies, we may set additional cookies to understand how visitors use the site. You can change your cookie preferences at any time using the cookie settings button at the bottom of any page.

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

• Order records and associated personal data are retained for 7 years for tax and legal compliance.
• VIP signup emails are retained until you unsubscribe or request deletion.
• Support messages are retained for 2 years.
• Account data is retained until you delete your account.
• AI chat conversations are retained so history is available if you return, and are deleted when the associated account is deleted (or, for signed-out visitors, after a reasonable period of inactivity).
• Live site-activity presence (who's currently browsing) is never written to a database — it only exists for the duration of your visit and disappears when you leave the site.

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your personal information (subject to legal retention requirements).
• Opt out of VIP email communications at any time by emailing us.

To exercise any of these rights, contact us at helpselfpaidessentialsxstudios@gmail.com.

We protect your data using industry-standard measures including TLS encryption in transit, row-level security on our database, and access controls that restrict which services can read sensitive data. Payment processing is fully handled by Stripe and never passes through our servers.

Our website is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Selfpaid Essentials × Studios operates an internal admin system. Authorised administrators have the ability to:

• View all registered accounts, including email addresses, sign-in history, and assigned roles.
• Grant or revoke manufacturer access for verified fulfillment partners.
• Remove manufacturer accounts and immediately revoke their platform access.
• Send password reset emails to assist users with account recovery.
• Delete user accounts upon request or in cases of policy violation or fraudulent activity.

Administrative access is restricted to the brand owner and is protected by role-based authentication. If your account is modified or removed by an administrator, you will be notified by email where practicable.

Manufacturers who apply to the platform agree that their application data (company name, email, role type, services, description, and message to the owner) will be visible to Selfpaid administrators for review purposes.

Administrators can also see, in real time, which visitors are currently active on the site (an anonymous browser identifier and current page, plus your email if you're signed in), and can review AI assistant conversations — including ones you had while signed out — to resolve issues and improve support quality. To be clear about what this is and isn't: it exists so our small team can offer live support and keep the platform running smoothly — it is not used to monitor, profile, or follow anyone's behavior across visits. As noted above, none of it is written to a database or kept once your visit ends.

We may update this privacy policy from time to time — including as new features are added to the platform. When we do, we will update the "Last updated" date at the top of this page. We don't send an individual notice for every change, but material updates are reflected in your account notifications. We encourage you to review this policy periodically.

Manufacturer partners can connect their own bank account, through Stripe, to receive their share of a sale directly. Selfpaid Essentials × Studios never sees or stores manufacturer bank account details — they are entered directly into Stripe's own secure onboarding flow and held under Stripe's privacy and security terms, not ours. We control when a payout is sent, but the transfer itself is processed entirely by Stripe.

If you have questions about this privacy policy or how we handle your data, please contact us at: