Privacy Policy

1.Introduction

Sacatelle Holdings LLC ("Sacatelle," "Merch.com," "we," "us," or "our") is committed to safeguarding your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our websites, sacatelle.com and merch.com, or engage with our products and services. By accessing or using our websites and services, you agree to the terms outlined in this policy.

2.Information We Collect

We collect and process various types of information depending on your interactions with us:

1. Business Information: Includes the name, address, and contact details of your business.
2. Personal Information: Includes your name, email address, phone number, and any other contact details you provide.
3. Order Information: Includes details necessary for processing your orders, such as product selections, billing, and shipping addresses.
4. Payment Information: Payment details are processed and securely stored by our third-party payment processors.

3.How We Collect Information

We collect information in the following ways:

1. Directly from You: When you submit inquiries, request quotes, place orders, or otherwise communicate with us via our websites, email, phone, or in person.
2. Automated Technologies: We may collect limited data via cookies or similar technologies to ensure proper functionality of our websites, maintain security, and enhance user experience. We do not engage in behavior tracking or profiling.

4.How We Use Your Information

We use the information we collect to:

1. Order Fulfillment: Process, fulfill, and manage your orders efficiently.
2. Customer Support: Respond to your inquiries, provide assistance, and improve your overall experience with our services.
3. Marketing: Send you promotional offers and updates, provided you have opted in to receive such communications.
4. Business Operations: Manage and enhance our internal processes, websites, and services.
5. Legal Compliance: Fulfill our legal obligations and comply with regulatory requirements.

5.How We Share Your Information

We do not sell or rent your personal information to third parties. However, we may share your information in the following situations:

1. Service Providers: With trusted partners who assist us in operating our websites, processing payments, and delivering products and services. These partners are contractually obligated to protect your information and use it only for the services they provide to us.
2. Legal Requirements: If required by law or in response to valid legal processes, such as a subpoena, court order, or to protect our legal rights, we may disclose your information.

6.Data Security

We are committed to protecting your personal information through robust security measures, including:

1. Encryption: Sensitive data is encrypted during transmission and while stored.
2. Access Control: Access to personal data is restricted to authorized personnel who need it to perform their job duties.
3. Security Audits: Regular security audits are conducted to identify and mitigate vulnerabilities.

7.Your Rights and Choices

You have the following rights regarding your personal data:

1. Access: Request a copy of the personal data we hold about you.
2. Correction: Request corrections to any inaccurate or incomplete data.
3. Deletion: Request deletion of your personal data, subject to certain exceptions.
4. Opt-Out: Opt out of receiving marketing communications at any time.
5. Data Portability: Request your data in a structured, commonly used, and machine-readable format for transfer to another service provider.

To exercise these rights, please contact us at [email protected]. We will respond to your request within a reasonable timeframe and in accordance with applicable laws.

8.Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected or as required by law. Once the retention period has expired, we will securely delete or anonymize your data.

9.International Transfers

If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. We take appropriate measures to ensure that your information is handled securely and in accordance with this Privacy Policy.

10.Cookies and Similar Technologies

We use cookies and similar technologies on our websites for essential functions such as security, navigation, and enhancing user experience. These cookies do not track your browsing behavior beyond our websites. You can manage your cookie preferences through your browser settings, though this may affect the functionality of our sites. For details, see our Cookie Policy.

11.Browser Extensions

We publish the Merch.com Inbox browser extension for Google Chrome. This section explains what data the extension accesses, how it is used, and how you can stop it.

What the extension accesses.

When you install and use the Merch.com Inbox extension, it accesses the following data:

• Active Gmail thread participants. When the extension is open and you have a Gmail thread in view, the extension reads the names and email addresses displayed in the thread's participant chips. It uses this information to pre-fill the recipient of a merch send. The extension does not read message bodies, attachments, or any other Gmail content.
• Your authentication cookie. The extension reads the authentication cookie (token) set on .merch.com so you do not have to sign in twice. If no cookie is present, the extension asks you to sign in with your existing Merch.com credentials, and stores the resulting authentication token locally in the browser.
• Your active campaign selection. The extension stores your most-recently-used campaign locally in the browser, so it can pre-select it the next time you open the panel.
• Content you insert into Gmail. When you choose to insert an invite link or templated email into an open Gmail compose draft, the extension writes that content into the draft. It does not send the draft on your behalf — you review and send it yourself.

How the data is used.

All recipient data and campaign actions you initiate in the extension are transmitted directly to the Merch.com API and used solely to fulfill the action you requested (creating an invite, generating an invite link, or creating a fulfillment order). No data accessed by the extension is sold, transferred, or used for advertising, third-party analytics, or any purpose unrelated to the service you have signed up for.

Where the data is stored.

• Authentication tokens and the active campaign selection are stored locally in your browser and persist until you sign out or uninstall the extension.
• Recipient data you submit through the extension is stored on Merch.com's servers under the same data-handling and retention practices described elsewhere in this policy.
• The extension does not maintain its own server, database, or analytics pipeline.

Permissions the extension requests.

The extension declares the following Chrome permissions, each used only for the purpose listed: access to mail.google.com pages (to read the participants of your active Gmail thread and, when you ask, insert content into your open compose draft); access to Merch.com pages (to detect your existing sign-in via cookie and send requests to the Merch.com API); cookies (to read the Merch.com authentication cookie so you do not have to sign in twice); storage (to remember your authentication token and active campaign across sessions); side panel and active tab (to display the extension UI alongside whatever page you are on); and clipboard write (to copy an invite link to your clipboard when you ask the extension to do so).

Stopping the extension.

You can stop the extension from accessing any data by closing the extension's side panel (it does not run in the background while closed), signing out from the extension's settings menu (which clears the locally stored authentication token), or removing the extension at chrome://extensions.

12.Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. Any changes will be posted on this page, and we will update the "Effective Date" at the top of the policy. We encourage you to review this page periodically to stay informed about how we protect your information.

13.Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact: