Privacy Policy
Last updated [date]
Template — not legal advice. This is a plain-language starting point written for the product as it is built. Replace the bracketed parts with your legal entity’s details and have a lawyer review it before you launch.
This explains what [Your Company Legal Name] (“we”) collects when you use JewelPilot, why, and the choices you have.
What we collect
- Account details: name, email, company name, a hashed password (or your Google account’s email and name if you sign in with Google).
- Content you add: designs and photos, weights and prices, client details, share links, orders, and exhibition orders, including customer names and phone numbers you type in.
- Usage and security data: login times, IP address (for rate limiting and fraud prevention), and basic activity records such as sign-ups and plan changes.
- Payment details: handled by our payment provider; we receive the plan, status and a customer reference, never your full card number.
How we use it
To run the service, keep it secure, send emails you need (sign-up confirmation, password reset, order alerts), bill you, and support you. We don’t sell your data.
Who else handles it
- Hosting and database providers ([hosting provider, region]).
- An AI provider ([e.g. Anthropic]) processes a photo or question only when you use an AI feature.
- An email provider ([e.g. Resend]) and a payment provider ([e.g. Razorpay / Stripe]).
- Google, if you choose “Continue with Google”.
Your clients’ data
For the client and customer details you enter, you decide what to collect and why; we act as your processor and only handle it on your instructions. You are responsible for having the right to collect it.
Keeping and deleting data
We keep your content while your workspace exists. You can download it any time from Billing, and delete the workspace to have it removed (backups expire on their normal schedule). To ask about or correct personal data, write to [privacy email].
Security
Passwords are stored hashed, traffic is encrypted, and each workspace’s data is kept separate. No system is perfectly secure; we’ll tell you promptly if there is a breach affecting you.
Cookies and local storage
We use one login cookie, and on your device we store a few settings and — if you use Exhibition Mode — a copy of your catalog codes and any orders you haven’t sent yet, so it works without signal. We don’t use advertising cookies.
Changes and contact
We’ll update this page if our practices change. Contact: [privacy email]. See also our Terms of Service.