Privacy Policy

Account Information: When you sign in to Shelfly, we receive basic profile information from your identity provider (such as your name, email address, and profile photo). We do not collect or store passwords.

Store and Listing Information: If you create a store or space listing, we collect the information you provide, including store name, description, address, photos, dimensions, and pricing.

Booking Information: When you submit or receive a booking request, we collect the associated details: dates, business name, contact information, and booking status.

Contact Messages: If you use the platform's contact feature to message a store manager, we store the content of those messages to facilitate communication.

Payment Information: Payment processing is handled by Stripe. Shelfly does not collect or store your full card number, CVV, or banking details. We store only a Stripe customer ID (a reference token) associated with your account, which allows us to facilitate payments without accessing your raw financial data.

Usage Information: We may collect standard web server logs, including IP addresses, browser type, pages visited, and referring URLs, to help us operate and improve the Platform.

We use the information we collect to:

• Operate and provide the Shelfly Platform and its features
• Facilitate bookings between Vendors and Store Owners
• Process payments and issue payouts via Stripe
• Send email notifications related to booking requests, confirmations, and account activity
• Respond to your questions and provide customer support
• Detect and prevent fraud, abuse, and violations of our Terms of Service
• Improve the Platform through analytics and usage data
• Comply with applicable legal obligations

We do not sell your personal information to third parties.

Between Platform Parties: When a booking is confirmed, we share relevant contact and booking details between the Vendor and Store Owner to enable them to coordinate the rental. This includes name, email, phone (if provided), and booking dates.

Payment Processor: We share necessary payment information with Stripe to process transactions. Stripe's use of your data is governed by Stripe's own Privacy Policy.

Service Providers: We use third-party services (such as database infrastructure, email delivery, and authentication providers) that may process data on our behalf. These providers are bound by confidentiality obligations and may only use your data to provide services to Shelfly.

Legal Requirements: We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Shelfly, our users, or the public.

We retain your account information for as long as your account is active. Booking records are retained for a minimum of 3 years to support financial and legal compliance.

If you close your account, we will delete or anonymize your personal information within a reasonable period, except where retention is required by law or necessary to resolve disputes or enforce agreements.

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request that we correct inaccurate or incomplete information
• Deletion: Request that we delete your personal information, subject to legal retention requirements
• Portability: Request a machine-readable export of your data
• Opt-out of communications: You may opt out of non-transactional emails by contacting us

To exercise any of these rights, contact us at privacy@shelfly.biz. We will respond to requests within 30 days.

Shelfly uses session cookies to maintain your login state. We do not use third-party advertising cookies or behavioral tracking technologies. Web server logs (IP address, user agent, pages visited) are retained for security and operational purposes and are not used to build marketing profiles.

The Shelfly Platform is not directed to children under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this Policy periodically. Continued use of the Platform after changes constitutes acceptance of the updated Policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: