Privacy Policy

Version 2026-10-24. This is a notice of current practice, not an agreement, and nobody is asked to accept it. The practices in the table are what we do today; the wording may still be edited.

This policy explains how Stonebridge Digital LLC, doing business as SBCommerce.net ("SBCommerce.net", "we"), handles personal data. We are an Oregon company: Stonebridge Digital LLC, 4274 NW Canary Pl, Corvallis, OR 97330-2270, USA. Email us about your data at privacy@sbcommerce.net; section 6 says more.

1. Two roles

• Store owners and staff. For the people who use Admin and the API, we decide how their data is used: we are the controller. This policy is mainly about them.
• Shoppers. When you buy from a shop built on SBCommerce.net, the shop is the controller of your data and we process it on the shop's behalf, under our Data Processing Terms. Ask the shop about your data first; we will help it answer you. Section 8 covers what we do directly.

2. What we collect about owners and staff

We don't sell personal data, and we don't use it for advertising.

Waitlist. If stores can't be opened from your country yet and you join the waitlist, we keep your email address, the country and the date. We use them only to write to you once when SBCommerce.net opens in your country. Legal basis: your consent, which you can withdraw at any time by asking us to delete it. We don't send any other email to it and don't share it.

3. Where data is kept

• Our servers and databases run on Google Cloud in Oregon, USA.
• Email is sent through Amazon Web Services in Sweden (Stockholm).
• We are a US company, so what you give us is handled in the United States. For shoppers' data that EU, UK and Swiss stores have us process, our Data Processing Terms, which each store's owner confirms in Admin, put in place the EU standard contractual clauses and the UK addendum.

4. Who we share it with

Only service providers who process data for us under contract (our "sub-processors"), listed with what they do in the Data Processing Terms: Google Cloud and Firebase, Amazon Web Services (email), Cloudflare (network protection and delivery) and Anthropic (the optional Admin assistant). We also disclose data when the law requires it, or to protect people and the Service from harm or fraud.

When a store runs the assistant on its own Anthropic key, what the assistant sends goes to Anthropic under that store owner's own account and agreement with Anthropic, which bills them for it.

Payment providers you connect to your store (such as Stripe, PayPal, Creem or Dodo Payments) receive data under your agreement with them, not ours.

To check names against sanctions lists, we send only the names (yours, your store's and its legal name) to the US government's Consolidated Screening List service, run by the International Trade Administration at trade.gov.

AI apps you connect

Store owners and staff can connect their own AI app (such as Claude or ChatGPT) to a store, to look up and manage orders, stock, bookings and messages by chatting. When you do:

• You sign in on our page and choose the store. The app then receives only what it asks for, and only what your role in that store allows. Lists show shoppers' names and orders; email addresses and phone numbers only when the app asks for them.
• That data goes to the AI provider under your agreement with it, not ours: the provider is not our sub-processor, and the store remains responsible for its shoppers' data. Business plans (such as Claude for Work or ChatGPT Business and Enterprise) come with a data processing agreement and don't train on your data by default; personal plans may have different terms, so check them before connecting a store with many shoppers.
• We record which app acted, for whom and when, in the store's audit log. Refunds, cancellations and new payment requests asked for by an app only happen once a store owner or administrator approves them in Admin.
• You can disconnect an app at any time under AI apps in Admin, and a store owner can turn the connection off for the whole store.

Shipping labels

A store owner can connect their own EasyPost account to buy postage labels. When the store buys a label for an order, we send EasyPost the shopper's name, shipping address and phone number and the store's address, so EasyPost and the carrier can make and deliver the label. EasyPost then sends us tracking updates for that parcel. EasyPost acts under the store owner's agreement with it, not ours.

5. How long we keep it

• Account data: while your account exists. You can delete your stores in Admin, and your sign-in account under Admin › Profile once no store depends on you as its only owner; you can also ask us (section 6). Your name is then removed from each store's staff list, while the orders and history it appears in stay with the store. We keep the record of what you agreed to, as set out below.
• A deleted store: removed 30 days after the owner asks, unless reopened first. Database backups roll off within a further 7 days.
• Server logs: about 30 days.
• Audit log and support tickets: for the life of the store.
• Store reviews and reports: for the life of the store. A reporter's name and email are deleted when the report is closed. For a copyright notice that made us disable something, they are kept until it is restored (see "Copyright notices" below).
• AI app connections: sign-in tokens expire within 60 days of last use and end at once on disconnect; the record of a connection is kept with the audit log. Requests waiting for approval expire after 24 hours.
• Agreements to the Platform rules and our terms, and the 18 or older confirmations: while your account exists, and up to 6 years after it closes, to answer a dispute about what was agreed.
• A store's own Anthropic key: until an owner or admin removes it, or the store is deleted. Daily spend estimates and assistant warnings and suspensions: for the life of the store.
• Sanctions checks: the country you live in, while your account exists. Screening results and our review of a possible match: up to 5 years after the account closes, as a record that we followed sanctions law.
• Google and Facebook sign-in at a shop: the record of each sign-in for one day; a Facebook link until the shopper unlinks it, the shop erases the shopper, or the shop is deleted.
• Sign-up text code requests: 30 days, then deleted automatically.
• Manual phone checks: until a year after our team's decision, then deleted automatically. Your account keeps the phone number and the date it was approved, like any verified phone.
• Waitlist: until we have written to you once that SBCommerce.net opens in your country, and never more than 2 years; sooner if you ask.
• Backups: 7 days.
• We may keep what the law requires, such as billing records, for longer.

6. Your rights

Depending on where you live (for example under the GDPR, UK GDPR, or US state privacy laws), you can ask to see, correct, delete, or export your data, object to or restrict some uses, and withdraw consent where we rely on it. Store owners can export their store's data and delete a store in Admin. To use any right, write to us through Support in Admin or by email to privacy@sbcommerce.net. If you have no account, email us, or use our report form, choose "Other", and leave your email so we can answer. We answer within one month. You may also complain to your data protection authority.

7. Security

We encrypt traffic (HTTPS) and stored data, hash API keys and recovery codes, offer two-step sign-in, keep each store's data apart, log administrative actions, and limit who on our side can reach production data. No system is perfectly secure. If a breach affects personal data:

• we tell the owners of the stores affected without undue delay, and within 72 hours of becoming aware of it, as our Data Processing Terms promise; each store then decides what to tell its shoppers;
• we tell data protection authorities and the people affected as the law requires (under the GDPR, the authority within 72 hours where notice is needed).

8. Shoppers

When you shop at a store built on SBCommerce.net:

• The store gets the details you give at checkout or in your account: name, email, phone, delivery and billing addresses, your orders and bookings, messages you send it, and technical details such as IP address and browser.
• If a store offers it, you can sign in with Google or Facebook instead of an emailed code. The provider tells us your name and email address, and we sign you in to the store with that email. For Facebook, the first time, the store also emails you a code to confirm the address is yours, and then keeps your Facebook account id (one Facebook issues for SBCommerce.net only) so you can sign in again without a code. We don't receive your password, your friends or anything you post, and we don't post anything. Google and Facebook handle their side of the sign-in under their own privacy policies. Facebook and Google show "SBCommerce.net" when you sign in, because that is the software the store runs on.
• We keep that data for the store and use it only to provide the Service to the store, to keep it secure, and as the law requires.
• A store can erase a shopper's personal details on request. Order amounts and the region they were taxed in are kept, because stores must keep sales records.
• Card details go straight to the store's payment provider; SBCommerce.net never receives full card numbers.
• If you review something you bought, the store publishes your stars, words and photos with a "Verified purchase" badge, and your name only if you ticked the box to show it. Photos are redrawn without their location or camera details. You can change or delete your review from its link or your account; erasing your details deletes your reviews too. If the store sends review invitations, each email has a link to stop them.

Facebook data

To remove the link between your Facebook account and a shop, choose Unlink Facebook on the shop's account page, ask the shop to erase your details, or write to privacy@sbcommerce.net with the shop's address and the email you use there. When you write to us, we delete the link within 30 days and confirm by email. You can also remove SBCommerce.net in Facebook under Settings › Apps and websites; that stops future sign-ins but doesn't delete the shop's record of your orders, which shops must keep.

Reporting a store

Anyone can report a shop hosted by SBCommerce.net on our report form at www.sbcommerce.net/report, which the footer of every shop based in the EU links. For a report, we are the controller. We keep your name and email, the shop's address and the page you report, the kind of problem and your explanation, to review the store. Name and email may be left out only for a report of illegal content. We use your email to send a receipt and our decision, and to ask you about the report. Your name and email are deleted when we close the report, and we don't give them to the shop. Your network address is used only to limit how many reports can be sent, and appears in our server logs like any other request.

Copyright notices

A copyright notice under the US Digital Millennium Copyright Act works differently, because the law sets out who sees what. When we disable material after your notice, we tell the store owner the name you gave and what your notice says, but not your email. If the owner sends a counter-notice, the law requires us to send you a copy, which includes the owner's name, address, phone number and email. So we keep your email while the material stays disabled, and delete it when the material is restored. We keep a record of each upheld notice against the owner for three years, to apply our repeat-infringer rule.

9. Cookies and local storage

We use only what the Service needs to work, and nothing for advertising or analytics, so no consent banner is shown. If that changes, we will ask first.

Cookies

• Admin (www.sbcommerce.net) sets no cookies of its own.
• Phone verification at sign-up uses Google reCAPTCHA, which may set its own cookies to tell people from bots.
• Shops are their owners' own sites. Our starter shop uses a cookie for a shopper's sign-in, and, while a shopper is signing in with Google or Facebook, a second cookie for up to 10 minutes that ties the sign-in to their browser. A shop's own code may add other cookies; that shop is responsible for them.

Local storage

Admin keeps a few things in your browser's storage, and nothing in it is used to track you:

• your sign-in (Firebase Authentication): until you sign out if you choose to stay signed in on this device, otherwise until you close the tab;
• small choices, such as the last store and page you opened and how you like some lists and panels shown;
• during sign-up, your answers (such as your country and the box you ticked) until your account is ready, and the page to return to after signing in.

Our starter shop keeps a shopper's cart in browser storage.

10. Children

The Service is for businesses and not meant for children under 16. You must be at least 16 to create an account; under 18, a parent or guardian must agree to our terms for you. The Admin assistant is only for people 18 or older, who confirm it before first use. We don't knowingly collect data about children under 16.

11. Changes

We will post changes here with a new version date, and tell account holders about important ones before they apply.