Privacy Policy

add.style (the “Service”) is operated by the add.style team. When this policy talks about “we”, “us” or “our”, it refers to the operator of the Service. You can reach us at hello@add.style.

We collect only what we need to run the Service and fulfil your requests:

• Account data: your name, email address and a hashed password (only if you sign up with email and password). If you sign in with Google, we receive your name, email and Google profile image instead — never your Google password.
• Merchant data: if you open a shop, we additionally store your shop name, slug, brand colour, logo and the products and images you publish.
• Activity data: the designs, products and shops you favourite, the products you publish, and basic technical metadata such as IP address, user agent and timestamps for sign-in sessions.
• Files you upload: images and other assets you attach to a design, product or shop logo. These are stored on our file service and served through a CDN.

We do not knowingly collect special categories of personal data (health, religion, political opinions, etc.). Please do not submit such information.

We use the data above to:

• create and secure your account and keep you signed in;
• display your favourites and personalise what you see on the Service;
• let shops manage their catalog and let buyers discover products and designs;
• communicate with you about your account, security or important changes to the Service;
• detect abuse and meet legal obligations (for example responding to valid requests from authorities).

Where the GDPR applies, we process your data on the following legal bases:

• Contract. Running your account and providing the Service you asked for.
• Legitimate interests. Keeping the Service secure, preventing abuse, and improving the product.
• Consent. Optional cookies and any marketing emails you choose to receive.
• Legal obligation. Tax, accounting and similar duties applicable to shop operators.

We never sell your data. We share it only with service providers who help us run add.style:

• Hosting & database: our application is hosted on Vercel and our database on Neon (PostgreSQL).
• Authentication: Google is used as an optional sign-in provider.
• File storage & CDN: images and uploads are stored and delivered through our file service (xfiles) running on AWS S3 and CloudFront.
• Search: a subset of public catalog metadata is indexed in Algolia to power search.

These providers process data only on our instructions and under appropriate data protection agreements.

Some of our providers process data outside the European Economic Area. Where this is the case, transfers rely on the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism.

We keep account data for as long as you have an active account, plus a reasonable period afterwards if we need to retain it to comply with legal obligations, resolve disputes or enforce our agreements. Sign-in session records are deleted automatically when they expire.

You can ask us to delete your account at any time by emailing us at the address above.

Depending on where you live, you may have the right to access, rectify or erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. EU/EEA residents may also lodge a complaint with their local data protection authority. To exercise any of these rights, contact us at hello@add.style.

We use industry-standard safeguards including HTTPS in transit, hashed passwords (we never store the plaintext) and restricted access to production systems. No method of transmission or storage is perfectly secure, but we work continuously to protect your data.

add.style is not directed to children under 16. If we learn that we have collected personal data from a child without parental consent where required, we will delete it.

When we make material changes to this policy we will update the “Last updated” date above and, where appropriate, notify you by email or through the Service.