Privacy

If you bought something

We hold:

• Your name and email, and what you chose (the size or colour), copied from the checkout you completed on the Bumpsale engine.
• What you paid, and anything refunded. We never see or store your card details; those stay with Stripe.
• Your shipping address and optional phone number, but only after the drop reaches its goal, and only because we're about to ship you something.

We use it to fulfil your order, tell you what's happening with it, and handle a refund if one is due. That's the whole list.

Who your address goes to

It depends on who prints the item, and the drop's page tells you which:

• Print on demand. Your address goes to Printify, who print and ship it. The seller sees only your city and state, never your street.
• A seller printing their own run. The seller ships it themselves, so they receive your full address. There's no way around that: someone has to put it on the parcel.

If you sell on bumpmerch

We hold your email and login, your campaign settings, and the keys you connect for Stripe, Printify and the Bumpsale engine. Those keys are stored server-side, are never sent to a browser, and are used only to act on your instructions.

If you upload a printer's quote or a product mockup, they're kept in private storage that only you and our servers can read. When you ask us to read the numbers off a quote, the file is sent to an AI provider (Lovable's gateway, or Anthropic for PDFs) purely to extract those numbers. You confirm every figure before anything is saved.

The companies involved

We use a small number of services to make bumpmerch work, and each one gets only what it needs: Supabase and Lovable for the database, hosting and email delivery; the Bumpsale engine for checkout and order records; Stripe for payments; Printify for printing and shipping when the drop uses print on demand; and an AI provider for reading uploaded quotes when a seller asks. Support messages go to the Bumpsale support desk, which is run by the same people.

Emails, and stopping them

We email you about your own orders: that printing has started, a request for your address, a reminder if we haven't heard back, and news of a refund. Every one carries an unsubscribe link, and it works immediately.

One honest warning, because unsubscribing has a real cost here: those emails are how we ask for your shipping address. If you stop them before you've sent it, the seller can't ship to you. Your refund rights aren't affected either way. You can unsubscribe from the link in any email, and ask us to turn them back on at any time.

Cookies

No advertising cookies, no third-party trackers, no analytics profiles. Signing in stores a session in your browser so you stay signed in, and the dashboard remembers whether you left the sidebar open. That's all.

How long we keep it

Order records, including what was paid and refunded, are kept while a drop is running and afterwards as business and tax records. Shipping addresses are kept as long as they're needed for the order and for handling anything that goes wrong with delivery. If you unsubscribe, we keep a note of your email address for the sole purpose of not emailing you again.

Your choices

Ask us and we'll tell you what we hold about you, correct anything wrong, or delete what we're not required to keep. Depending on where you live you may have a formal right to those things; we'd rather just do them than argue about which ones apply.

Stated plainly: there's no self-service delete button yet. Deletion is done by a person when you ask, and we'll confirm when it's done.

Privacy requests go straight to privacy@bumpsale.com, which reaches a person rather than a queue.

You can also reply to any bumpmerch email. Written requests can be sent to 5050 Laguna Blvd #112-619, Elk Grove, CA 95758. If we change this notice in a way that affects you, we'll say so here and update the date at the top.