Privacy policy

• Your email address, and your phone number if you sign in by text message.
• Your Google account id, name and email if you sign in with Google.
• What you put into Pastefront: product links, your store's name, text, images, prices, policies and contact details, and the instructions you give the builder and chat edits.
• Your plan, credit balance and credit history, and a record of your Stripe customer and subscription.
• A short-lived log of sign-in attempts, kept as one-way hashes of the email or phone number used and of the IP address, so that repeated attempts can be limited. Entries expire after a day.
• The id of the Stripe account you connect for your store, and whether it can take payments.
• If you connect your own Printify account, its personal access token, stored encrypted, and the shop you picked. We use the token only to make your products and place your orders in that shop, and delete it when you disconnect.

When someone buys from a store, Pastefront handles their order on behalf of the store owner, who is the seller. That includes the buyer's name, email, phone number if given, shipping address, what they bought and the order status and tracking. We pass the shipping details to the supplier so the order can be delivered.

If a store shows an email sign-up box, the store collects the email address, when it was given and the consent text shown, plus a one-way hash of the visitor's IP address used to limit abuse. The store owner can see and export that list.

Each order has a private link with a long random code that shows its status. Anyone with the link can see the order, so buyers shouldn't share it.

Card numbers and bank details are entered on Stripe's pages, not ours. Pastefront never sees or stores a buyer's or owner's full card number, and never sees the bank account a store owner connects to Stripe for payouts.

• To sign you in, build and host your store, and run the features you use.
• To take payments for plans and credits, and to place, pay for and track supplier orders.
• To prevent fraud and abuse, enforce the terms and keep the service working.
• To answer you when you write to us.

We don't sell personal information, and we don't use it for advertising.

• Supabase: sign-in and the database.
• Google: sign-in, if you choose it.
• Twilio: the text messages for phone sign-in.
• Vercel: hosting for pastefront.com and every store.
• Stripe: billing for plans and credits, and Stripe Connect for each store's checkout and payouts.
• Anthropic: the AI models that write and edit stores. It receives product listings and your instructions, not buyer details.
• OpenRouter: routes Saver chat edits and ad copy to lower-cost AI models. It receives product listings and your instructions, not buyer details, and every request asks for zero data retention and no training.
• CJ Dropshipping: product data, and the buyer's name, address and phone for CJ orders.
• AliExpress: product data; store owners place AliExpress orders themselves.
• Printify: print-on-demand products, the owner's design file, and the buyer's name, address and phone for Printify orders.
• Resend: sign-in emails, and the emails stores send their buyers (order and shipping emails, and the email flows an owner turns on).
• Cloudflare: DNS for pastefront.com, and storage for product pictures.
• Our error alerts: when something breaks, the error message and the page it happened on are sent to a private alert channel; no personal details, request contents or headers are included.

Each one handles data under its own terms and only to provide its part of the service.

Pastefront uses cookies only to keep you signed in (for up to 30 days if you choose “Keep me signed in”, otherwise until you close the browser) and, for store owners, to preview unpublished changes. A store also keeps, in your own browser, whether you have closed its email sign-up box and a discount code you have been given. Stores also set a first-party cookie that holds a random ID, kept for up to 6 months, to count visits and to show a visitor the same version while the store runs an A/B test; it isn't tied to your name or email and isn't shared. There are no advertising or cross-site tracking cookies, on pastefront.com or on stores.

Owner account data is kept while the account is open and deleted when you ask us to close it. Order records, including buyer details, are kept for as long as the store owner needs them for fulfillment, returns, disputes, tax and accounting, and are deleted on request where the law allows. Backups held by our processors expire on their own schedules.

You can ask to see, correct, export or delete your personal information by writing to hello@pastefront.com. Buyers can write to the store owner (their contact details are on the store) or to us; for order data we act with the store owner, who is the seller. We'll answer within 30 days.

Pastefront is not for anyone under 18. We don't knowingly collect information from children.

Data is sent over HTTPS, the database limits each owner to their own stores and orders, and payment details stay with Stripe. No system is perfectly secure; if a breach affects your information, we'll tell you as the law requires.

We'll update this page when what we collect or who processes it changes, and change the date above. Questions: hello@pastefront.com.