Privacy Policy
This Privacy Policy explains what information CPG X Direct ("CPG X," "we," "us") collects through the Platform, how we use it, and the choices you have.
1. Information we collect
| Category | Examples |
|---|---|
| Account info | Name, email address, phone number, password (stored encrypted by our authentication provider) |
| Profile info | Photo, bio, contact details you choose to add to your profile |
| Application info | Business name, address, website, pricing, and other details submitted when applying as a Rep, Store, or Brand |
| Order data | Products ordered, quantities, prices, commission calculations, and order status |
| Usage data | Basic technical data such as browser type and access times, collected automatically |
2. How we use this information
- To operate the Platform — create accounts, process applications, route orders, and calculate commissions.
- To communicate with you — application status, order updates, account and security notices.
- To maintain the security and integrity of the Platform, including detecting spam or abuse.
3. How we share information
We share information only as needed to operate the Platform: a Store's order details are shared with the relevant Brand for fulfillment, and a Rep's contact information may be shared with Stores they're assigned to. We do not sell your personal information to third parties.
We use third-party service providers to run the Platform, including Supabase (database, authentication, and file storage), Netlify (website hosting), and Resend (transactional email). These providers process data on our behalf and under their own security and privacy commitments.
4. Data retention
We retain account and order information for as long as your account is active and as needed to meet legal, accounting, or reporting obligations. You can request deletion of your account by contacting us.
5. Security
We use industry-standard access controls, including row-level security on our database and encrypted authentication, to limit who can view or modify your data. No system is completely secure, and we can't guarantee absolute security.
6. Your choices
- You can update your profile information (name, phone, bio, photo) at any time from your account.
- You can request a copy of your data or ask us to delete your account by contacting us below.
7. Children's privacy
The Platform is intended for business use by adults and is not directed at children. We do not knowingly collect information from anyone under 18.
8. Changes to this policy
We may update this Privacy Policy from time to time. We'll update the "Last updated" date above when we do.
9. Contact
Questions about this policy or your data can be sent to shannon@cpgxbrands.com.