Privacy Policy
Last Updated: April 1, 2026
This Privacy Policy describes how Matcha Square LLC ("we," "us," or "our") collects, uses, discloses, and protects your information when you use our platform, website, and services (collectively, the "Platform").
1. Information We Collect
1.1 Information You Provide
- Account Information: Name, email address, phone number, business name, business address, and role (Supplier or Buyer).
- Payment Information: Stripe account details for Suppliers; payment method details for Buyers. Payment information is collected and processed directly by Stripe and is subject to Stripe's Privacy Policy. We do not store full credit card numbers on our servers.
- Profile and Listing Data: Product descriptions, images, pricing, company logos, and other content you upload to the Platform.
- Communications: Messages exchanged through the Platform's messaging system, support inquiries, and other correspondence with us.
- Order Data: Purchase history, transaction amounts, shipping addresses, and fulfillment details.
1.2 Information Collected Automatically
- Usage Data: Pages visited, features used, actions taken, timestamps, and referring URLs.
- Device Information: Browser type, operating system, device identifiers, and screen resolution.
- Log Data: IP address, access times, and server logs.
- Cookies and Similar Technologies: See our Cookie Policy for details.
1.3 Information from Third Parties
- Stripe: Transaction status, payout information, and account verification data.
- Shopify: Product and inventory data for Suppliers who connect their Shopify stores.
- Analytics Providers: Aggregated usage and traffic data.
2. How We Use Your Information
We use the information we collect to:
- Operate, maintain, and improve the Platform.
- Process transactions and send related communications (order confirmations, invoices, shipping updates).
- Facilitate communication between Suppliers and Buyers.
- Manage Supplier portals, product listings, and custom pricing configurations.
- Coordinate sample distribution and tracking.
- Provide customer support and respond to inquiries.
- Send administrative communications, including policy updates and service announcements.
- Detect, prevent, and address fraud, abuse, and security issues.
- Analyze usage trends and improve the user experience.
- Comply with legal obligations.
We do not sell your personal information.
3. How We Share Your Information
We share your information in the following circumstances:
- Between Suppliers and Buyers: When you place an order or initiate contact through the Platform, relevant transaction and contact information is shared between parties as necessary to complete the transaction.
- Service Providers: We share information with third-party service providers who perform services on our behalf, including Stripe (payment processing), Supabase (data infrastructure), Resend (transactional email), and analytics providers. These providers are contractually obligated to use your information only as necessary to provide their services.
- Shopify: For Suppliers who connect Shopify stores, product and order data is synced between platforms.
- Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
- With Your Consent: We may share information for other purposes with your explicit consent.
4. Data Retention
We retain your information for as long as your account is active or as needed to provide services, comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law or legitimate business purposes (such as completed transaction records).
5. Data Security
We implement commercially reasonable technical and organizational measures to protect your information, including encryption in transit (TLS), access controls, and secure infrastructure through our hosting and data providers. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
6. Your Rights and Choices
Depending on your jurisdiction, you may have the following rights:
- Access: Request a copy of the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete information.
- Deletion: Request deletion of your personal information, subject to legal retention requirements.
- Data Portability: Request your data in a structured, machine-readable format.
- Opt-Out of Marketing: Unsubscribe from marketing emails using the link in any marketing communication. Note that you may still receive transactional and service-related emails.
- Cookie Preferences: Manage cookie settings as described in our Cookie Policy.
To exercise these rights, contact us at privacy@matchasquare.com. We will respond to verified requests within 45 days.
7. California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act and the California Privacy Rights Act, including the right to know what personal information we collect, the right to delete your information, and the right to opt out of the sale or sharing of personal information. We do not sell personal information. To submit a request, contact us at privacy@matchasquare.com.
8. International Users
The Platform is operated from the United States. If you access the Platform from outside the United States, your information may be transferred to, stored, and processed in the United States. By using the Platform, you consent to such transfer and processing.
9. Children
The Platform is not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or Platform notification. The "Last Updated" date at the top of this policy indicates the most recent revision.
11. Contact
For questions or concerns about this Privacy Policy or our data practices, contact us at:
Matcha Square LLC Email: privacy@matchasquare.com
