Privacy Policy

Foil Haven is software operated by Prompt Critical, LLC. This policy explains what data we collect when you use Foil Haven, how we use it, who we share it with, and the choices you have. It applies to the Foil Haven application and related services. For the terms governing your use of the service, see our Terms of Service.

We collect only what we need to run the service:

• Account information — the email address you use to create and sign in to your account, and any staff emails you invite.
• Store data synced from Shopify — the inventory, product listings, and order data we read from the Shopify store you connect, in order to provide inventory tracking, listing sync, and repricing.
• Your encrypted Shopify connection token — the access credential that lets Foil Haven talk to your connected store. It is stored encrypted at rest (see Section 5).
• In-store point-of-sale (POS) transaction data — for stores using the POS, the tender type (cash, card, store credit, or gift card), sale amounts, sales tax collected, discounts, and receipt data for each in-store sale.
• Trade-in records — the cards and value accepted in a trade-in, and any resulting store-credit issuance.
• Store-credit and gift-card ledger data — gift card codes and balances, store-credit balances, and the customer contact information (such as a name, email, or phone number) a store ties to a balance so it can be looked up and redeemed.

Full payment card numbers are entered directly with our payment processor, Stripe, and are not stored on Foil Haven’s servers. For in-store card payments, Foil Haven stores only the tender type and transaction amounts, not card numbers.

We use the data above to:

• Provide, operate, and maintain the service — authentication, inventory tracking, Shopify listing sync, repricing, the kiosk, and buylist intake;
• Communicate with you about your account, billing, security, and service updates;
• Provide support when you contact us; and
• Monitor, secure, troubleshoot, and improve the service.

We do not use your store’s inventory or order data for advertising, and we do not build profiles of your customers.

We rely on a small set of trusted service providers to run Foil Haven. They process data only on our instructions and only as needed to provide their part of the service:

• Stripe — payment and subscription processing.
• Supabase — database and authentication.
• SendGrid — transactional and account email.
• Vercel — application hosting.
• Shopify — your own connected store, which is the source of the inventory and order data we sync.

We use industry-standard measures to protect your data, including encryption in transit. Your Shopify access token is encrypted at rest so that it is not readable in plain text in our database. Access to production systems is restricted, and we work to limit data collection to what the service requires.

No method of transmission or storage is perfectly secure, so we cannot guarantee absolute security. If we become aware of a breach affecting your data, we will notify you as required by applicable law.

We retain your account data and synced store data for as long as your account is active. When you disconnect your Shopify store, we stop syncing and delete the stored access token. When you close your account, we delete or anonymize your data within a reasonable period, except where we must retain certain records to comply with legal, tax, or accounting obligations.

We do not sell your personal data, and we do not share it with third parties for their own marketing. We share data only with the service providers listed in Section 4, and only as needed to operate the service, or where required by law.

Depending on where you are located, you may have rights to access, correct, export, or delete the personal data we hold about you, under laws such as the California Consumer Privacy Act (CCPA) and the EU/UK General Data Protection Regulation (GDPR). We honor these requests regardless of where you are located.

To make a request, email support@foilhaven.com. We may need to verify your identity before acting on a request, and we will not discriminate against you for exercising these rights.

We send account-related and transactional emails (such as billing, security, and service notices) as part of providing the service. If we send any non-essential or promotional email, it will include a way to unsubscribe, and we will honor your opt-out as required by the CAN-SPAM Act.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you through the service or by email.

Questions about this policy, or a request about your data, can be sent to support@foilhaven.com.