Privacy Policy

Overview

BagThat (“we,” “us,” or “our”) operates the BagThat platform and affiliated creator storefronts. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, dashboard, progressive web app, and related services.

Information we collect

• Account information: email address, password credentials, and profile details provided when you create an account or subscribe.
• Tenant/store data: store name, subdomain, logo, brand colors, social links, affiliate identifiers, and product selections used to personalize your storefront.
• Usage and analytics data: pages viewed, clicks, device type, browser, IP address, and referral sources. We use this to improve performance, detect abuse, and report aggregate trends.
• Payment information: BagThat does not store full payment card details. Subscription billing is handled by Stripe, and we receive only the information necessary to manage your subscription status.
• Communications: emails or support messages you send us, including your contact details.

How we use your information

• Provide, operate, and maintain your storefront and dashboard.
• Process payments and manage subscription status.
• Measure usage, diagnose errors, and improve features.
• Send account-related notices, updates, and marketing communications (where permitted).
• Comply with legal obligations and enforce our terms.

Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how visitors interact with storefronts. You can control cookies through your browser settings. Disabling cookies may limit certain features.

Third-party services

We rely on trusted third parties to operate BagThat:

• Lovable Cloud / Supabase: database, authentication, and storage infrastructure.
• Stripe: payment processing and subscription management.
• Amazon and affiliate networks: product data, affiliate links, and commission tracking.

These providers have their own privacy policies and process data only as necessary to perform the services we request.

Data sharing and disclosure

We do not sell your personal information. We may share data with service providers, to comply with legal process, to protect our rights, or in connection with a business transfer such as a merger or acquisition.

Your rights

Depending on your location, you may have the right to access, correct, delete, or restrict processing of your personal information. To exercise these rights, contact us at the email below. You may also update many account and store details directly in your dashboard.

Security

We use industry-standard measures including encryption in transit, row-level security controls, and restricted access to production systems. No method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Children’s privacy

BagThat is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe we have collected such information, please contact us.

Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of BagThat after changes means you accept the revised policy.

Contact us

Questions about this Privacy Policy or your data? Email us at hello@themillionheirgroup.com.