Privacy Policy

This policy explains how PepsiteBuilder handles personal information for two groups: Operators (store owners with platform accounts) and visitors to the PepsiteBuilder site. For shoppers on an individual store, the Operator of that store is responsible for their data; PepsiteBuilder processes store-customer data on the Operator's behalf to run the store (see section 5).

From Operators: name, email, password (stored as a hash), store configuration, billing details processed by our payment providers, and support communications. Automatically: log and device data (IP address, browser, pages viewed) and session cookies needed to keep you signed in.

We also record legal acceptances: when an Operator accepts our terms and policies, we store the document versions, timestamp, IP address, and browser identifier as evidence of acceptance.

We use information to operate and secure the Platform, provide support, process billing, send transactional messages (verification, receipts, order and account notices), prevent fraud and abuse, and comply with legal obligations. We do not sell personal information.

We share information with service providers who process it for us — hosting, payment processing, domain registration, and email delivery — under their own contractual duties. We may disclose information to comply with law, enforce our agreements, or protect the rights, safety, and property of PepsiteBuilder, its users, or the public. If the business is sold or merged, information may transfer as part of that transaction.

When you buy from a store built with PepsiteBuilder, the Operator of that store is the controller of your data. PepsiteBuilder stores and processes it (account details, orders, shipping addresses, order attestations) on the Operator's behalf to run the store. Requests about your data on a store should go to that store's contact email; we assist Operators in fulfilling them.

The Platform uses first-party cookies for authentication sessions and core functionality (for example, remembering your cart or age-gate confirmation on a store). It does not use third-party advertising cookies.

We retain information for as long as needed to operate the Platform and meet legal, tax, accounting, and dispute-resolution obligations. Order records and legal-acceptance records are retained after account closure where we have a legitimate need to keep evidence of transactions and consent.

We use reasonable technical and organizational safeguards, including hashed passwords and encrypted transport. No system is perfectly secure; we cannot guarantee absolute security.

You may access, correct, or delete your account information by contacting support. Depending on where you live, you may have additional statutory rights (such as access, portability, deletion, or objection); we honor valid requests as required by applicable law. Some records may be retained where the law allows or requires it.

The Platform and stores built with it are for adults 21 and older. We do not knowingly collect information from anyone under 21; if we learn we have, we will delete it.

We may update this policy; material changes will be announced through the dashboard or by email. Questions can be sent through the contact page.