We collect information you provide directly to us, including:

• Account Information: Name, email address, phone number, and business details when you create an account.
• Payment Information: Bank account details for ACH transfers processed through our payment partners (Stripe and banking providers).
• Inventory Data: Product information, pricing, and consignment details you enter into the platform.
• Usage Data: How you interact with our services, including features used and preferences.

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send technical notices, updates, and security alerts
• Respond to your comments, questions, and customer service requests
• Sync inventory data with Shopify and other integrated platforms
• Monitor and analyze trends, usage, and activities

We share information with third parties only in the following circumstances:

• Payment Processors: Stripe and banking providers to process transfers and payments
• E-commerce Platforms: Shopify to sync your inventory and orders
• Service Providers: Companies that assist us in operating our platform
• Legal Requirements: When required by law or to protect rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We implement industry-standard security measures to protect your data:

• Encryption: All data transmitted is encrypted using TLS 1.3
• SOC 2 Compliance: Our infrastructure partners maintain SOC 2 Type II certification
• Access Controls: Role-based access controls limit data access to authorized personnel
• Regular Audits: We conduct regular security assessments and penetration testing
• Data Isolation: Multi-tenant architecture ensures complete data separation between stores

You have the following rights regarding your personal information:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate personal data
• Deletion: Request deletion of your personal data (subject to legal retention requirements)
• Portability: Request a machine-readable copy of your data
• Opt-out: Unsubscribe from marketing communications at any time

To exercise these rights, contact us at privacy@getlace.io

We retain your information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements

After account deletion, we may retain certain information as required by law or for legitimate business purposes.

We use cookies and similar technologies to:

• Keep you logged in to your account
• Remember your preferences (theme, location settings)
• Analyze usage patterns to improve our services
• Prevent fraud and enhance security

You can control cookies through your browser settings, but disabling them may affect functionality.

Lace is intended for business use and is not directed to children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new policy on this page
• Updating the "Last Updated" date
• Sending an email to account holders for significant changes

Your continued use of Lace after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: privacy@getlace.io
Address: Lace, Inc.
123 Tech Street
San Francisco, CA 94105

For data protection inquiries in the EU, contact our Data Protection Officer at dpo@getlace.io