Junk Store Portal

1. Information We Collect

• Email address and payment details (handled by Stripe)
• IP address and usage data

2. How We Use Your Information

To process purchases, provide support, improve our services, and prevent abuse of our service.

3. Third-Party Services

We share your data only with trusted third-party service providers necessary to operate our service:

• Stripe – We use Stripe to process payments. Stripe may collect and process your payment information as a data controller. For more information, see Stripe's Privacy Policy and Data Processing Agreement.
• Firebase (by Google) – We use Firebase for hosting, authentication, and database services. Data is processed under Google's Data Processing and Security Terms.
• Google Analytics (if enabled) – We may use Google Analytics to understand user behavior, but it is only activated after you provide consent via our cookie banner. For more details, see Google's Privacy Policy.

These providers may transfer data outside of New Zealand or the EU. We ensure appropriate safeguards (such as Standard Contractual Clauses) are in place.

4. Your Rights

If you're in the EU, UK, or California, you can access or request deletion of your data by emailing us, or by using the in-app account deletion flow.

5. Account deletion holds

Deletion requests are honoured without undue delay, as required by GDPR Article 17. We apply the following short holds under Article 6(1)(f) (legitimate interests) to prevent fraud, protect us against chargebacks, and avoid leaving payments unattended:

• 7 days from signup. Newly created accounts cannot be deleted for the first 7 days. This is a fraud-prevention measure against trial-abuse patterns.
• Active trial. If you have an active trial, you need to let it end (or cancel it and let the trial period run out) before we can delete the account.
• Live subscription. If you have a subscription that could still generate a charge (active, past-due, unpaid, or incomplete), you'll need to cancel it and let it fully wind down before we can delete the account.
• Recent successful payment (up to 120 days). Card networks give customers up to 120 days to dispute a charge. We need your account on file during that window to defend against fraudulent claims.
• Open support tickets. Please close any open tickets first so we don't lose the record of an in-flight conversation.

If a hold blocks your request, we'll tell you why and when it lifts. If you need to be removed sooner for a specific reason, email support and we'll review case by case.

When your account is deleted, we retain a small set of one-way hashes (of your email and any card fingerprints used on the account) to enforce future trial-abuse checks. These hashes cannot be reversed to recover the original email or card number.

Contact

Email: [email protected]