Privacy Policy

NativeMade ("we," "us") respects your privacy. This policy explains what information we collect, how we use it, and the rights you have over it.

1. Information We Collect

• Account info: name, email, password (hashed), profile details.
• Seller info: tribal affiliation, artist story, verification documents.
• Transactional info: shipping address, order history. Payment card details are collected and stored by Stripe, not by us.
• Communications: messages between buyers and sellers, support requests.
• Usage data: device, browser, IP address, pages viewed, and similar diagnostics.

2. How We Use Your Information

• To operate the marketplace, process orders, and deliver shipments.
• To verify seller identity and tribal affiliation.
• To send transactional emails (order confirmations, shipping notices, account notices).
• To detect fraud, abuse, and prohibited listings.
• To improve the Service.

We do not sell your personal information. We do not send marketing email without your explicit opt-in.

3. Sharing

We share information only with:

• Sellers and buyers as needed to complete a transaction (e.g., shipping address shared with the seller).
• Service providers who help us run the marketplace: Stripe (payments), Supabase / Lovable Cloud (hosting & database), email infrastructure providers.
• Law enforcement when legally required.

4. Cookies

We use strictly necessary cookies for authentication and security, and minimal analytics cookies to understand site usage. You can control cookies via your browser settings.

5. Data Retention

We keep account data while your account is active. Order records are retained for at least 7 years to meet tax and accounting obligations. You may request deletion of non-required data at any time.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise these rights email privacy@nativemademarket.com. California residents have additional rights under the CCPA/CPRA; residents of the EEA/UK have rights under the GDPR.

7. Security

We use industry-standard safeguards including TLS encryption in transit, encrypted credentials at rest, hashed passwords, and breached-password screening. No method of transmission over the internet is 100% secure.

8. Children

NativeMade is not directed to children under 13 (or 16 in the EEA/UK) and we do not knowingly collect their information.

9. International Transfers

We are based in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S.

10. Changes

We may update this policy. Material changes will be announced via email or in-app notice.

11. Contact

Questions? Email privacy@nativemademarket.com.