This Privacy Policy explains how P & C Collectables ("we," "us," or "our") collects, uses, and protects information in connection with the Toy Time Garage application (the "Service").
This policy covers two kinds of information: information about you as a Toy Time Garage customer ("Account Information"), and information you enter into the Service about your own customers — your buyers and vendors ("Business Data").
For Business Data, you are the one who decides what to collect and why — you are the "data controller." We simply store and process Business Data on your behalf, as a "data processor," using the technical safeguards described below. If someone contacts us asking about data you entered (for example, one of your buyers), we'll refer them to you.
We use Account Information to operate your Account, process billing, provide support, and communicate important service updates. We use Business Data only to provide the Service back to you (storing and displaying it within your Account) — we don't sell it, rent it, or use it to advertise to you or your customers. We use Technical Information to diagnose and fix problems with the Service.
Your Business Data is stored in a shared database but is technically isolated per Account using database-level access rules (Row Level Security) — no Account can read another Account's data through the Service, even by mistake.
We use a small number of third-party providers to run the Service, each of which processes data only as needed to perform its function:
If we add payment processing (for example, through Stripe) or other providers in the future, we'll update this policy to reflect them.
We retain Account Information and Business Data for as long as your Account is active. If you cancel or your Account is terminated, we may retain data for a reasonable period afterward (to allow for reactivation or recovery from accidental cancellation) before deleting it. You can export your data at any time from the Data tab within the Service.
You can view, edit, or delete Business Data directly within the Service at any time. You can export a full backup of your Account's data from the Data tab. To close your Account entirely, contact us at the email below.
We rely on our infrastructure providers' security practices (encrypted connections, encrypted storage, access controls) and our own Row Level Security rules to protect your data. No system is perfectly secure, but we take reasonable steps to protect Account Information and Business Data from unauthorized access.
The Service is intended for business use by adults and is not directed at children. We don't knowingly collect information from children under 13.
We may update this Privacy Policy from time to time. If we make material changes, we'll notify you by email or through the Service.
Questions about this Privacy Policy, or want to request deletion of your data? Contact us at paulstuut@gmail.com or Candystuut@gmail.com.