Privacy Policy
Effective [Effective date]
This policy explains what [Alto legal entity name] (“Alto”, “we”) collects when you sell with Alto or buy from a store that runs on Alto, and what we do with it.
Sellers
When you sign up we collect your name, email and password (stored only as a secure hash). We keep what you put in your store: its name, logo, colors and fonts, products and photos, shipping, returns, contact email and tax settings.
To get paid you give your identity and bank details to Stripe, not to Alto. Stripe tells us your Stripe account’s ID and whether it can take payments and get payouts.
Shoppers
When you place an order we collect your email, name and shipping address, what you bought and what you paid. Card details go straight to Stripe through its payment form; Alto and the store never see your full card number.
Your bag, and your details for next time, are saved in your own browser. Stores count how many visits they get, without storing anything about who visited. We don’t use advertising or analytics cookies.
How we use it
To run Alto: to show stores, take and track orders, work out shipping and tax, send payments to sellers, prevent fraud and abuse, help when you contact us, and meet our legal obligations. We don’t sell personal information or share it for advertising.
Who we share it with
The store you buy from sees your order, name, email and address so it can ship to you. The seller is responsible for how they use it.
Our service providers handle data for us: Supabase (accounts, database and photo storage), Stripe (payments, payouts, identity checks and sales tax; see Stripe’s Privacy Policy), Cloudflare (hosting stores) and jsDelivr (serving fonts, which sees your browser’s IP address). They may process data in the United States.
We may also share information if the law requires it, to protect people or Alto, or as part of a merger or sale of Alto.
How long we keep it
We keep a seller’s account, store and orders until the seller deletes their account. Deleting it removes them from Alto; backups clear within [backup retention period]. Stripe keeps its own payment records under its policy.
Your choices
Sellers can see and change their details in the app, and delete their account from Store → Account.
Shoppers can ask the store they bought from, or email help@myalto.shop, to see, correct or delete their information. Depending on where you live, you may have other rights over your data; contact us to use them.
Security and children
We protect data with encryption in transit, access controls and providers that meet industry security standards. No system is perfectly secure, so tell us right away if you think your account is at risk.
Alto isn’t meant for children under 13, and we don’t knowingly collect their information.
Changes and contact
We’ll post changes here and tell sellers about important ones. Questions? Email help@myalto.shop.