Privacy Policy

1. Information We Collect

(a) Information you provide directly

• Account registration: name, email address, and password
• Designer application: business name, business type, approximate customer count, and portfolio links
• Listings: product name, description, price, shipping cost, quantity, photos, and category
• Orders: shipping address and contact information
• Support communications: messages you send to our team

(b) Information collected automatically

• Usage data: pages visited, time on site, clicks, and referring URLs
• Device and browser information: browser type, operating system, and IP address
• Cookies and similar tracking technologies (see Section 6)

(c) Information from third parties

• Payment data processed by Stripe, Inc. We do not store full payment card details. Stripe’s privacy policy governs their handling of your payment information.
• Authentication data if you use a third-party sign-in method

2. How We Use Your Information

• Create and maintain your account
• Process transactions between buyers and designers
• Verify designer eligibility under our platform criteria
• Send transactional emails: order confirmations, shipping updates, and account notices
• Enforce our shipping and auto-refund policies
• Respond to support and legal requests
• Detect and prevent fraud, abuse, and policy violations
• Operate and improve the Platform
• Comply with applicable legal obligations

We do not sell your personal information. We do not use your data for behavioral advertising.

3. How We Share Your Information

• With Stripe, Inc. to process payments
• With Resend or equivalent services to deliver transactional emails
• With Vercel and Supabase as infrastructure and hosting providers, under appropriate data processing agreements
• With law enforcement or regulatory bodies when required by law or to protect the rights and safety of our users
• In connection with a merger, acquisition, or sale of assets, with advance notice to affected users

Buyer shipping addresses are shared with the relevant designer solely for order fulfillment.

4. Data Retention

We retain your account information for as long as your account remains active. Upon account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by applicable law. Financial records related to completed transactions are retained for seven (7) years.

5. Your Rights

Depending on your location, you may have the right to access, correct, delete, restrict the processing of, or receive a portable copy of your personal information. To submit a request, contact us at privacy@offthegrid.nyc. We will respond within 30 days.

California residents: Under the CCPA, you have the right to know what personal information we collect and to opt out of its sale. We do not sell personal information.

EEA and UK residents: Our lawful bases for processing are (a) contract performance for account and transaction data and (b) legitimate interests for analytics and fraud prevention. You may lodge a complaint with your local supervisory authority.

6. Cookies

We use cookies for session management, security, and basic analytics. We do not use third-party advertising cookies. You may disable cookies in your browser settings, though some features of the Platform may not function correctly as a result.

7. Security

We implement industry-standard security measures including encrypted data transmission (TLS), hashed passwords, and access controls. No system is completely secure. In the event of a data breach, we will notify you as required by applicable law.

8. Children

The Platform is not directed at individuals under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at privacy@offthegrid.nyc and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or prominent Platform notice at least 14 days before the change takes effect. Continued use after the effective date constitutes acceptance.

10. Contact

Matalon Enterprises, LLC, doing business as Off The Grid
privacy@offthegrid.nyc
offthegrid.nyc