Privacy Policy

1. Controller

ShopSprint AI is the controller. Contact: support@onemission.online. Registered address: Address to be confirmed, To be confirmed.

2. Data we collect

Account: name, email, password hash, locale, market, timezone, plan entitlements, consent timestamps.

Product use: diagnosis answers, missions, products you score, video metrics you log, AI prompts and outputs, quiz session if you pass a session id at checkout.

Technical: session cookies, IP and user agent for security, cookie preference (accepted vs essential).

Waitlist: email and country if TikTok Shop is not open where you live.

Payments are processed by Stripe. We receive order metadata (email, product, amount, status), not full card numbers.

3. Why we process it (lawful bases)

Contract: create your account, deliver the system, support, refunds.

Legitimate interests: security, fraud, product improvement of aggregated usage.

Consent: non-essential cookies and marketing measurement. You can refuse.

Legal obligation: tax, accounting, consumer-rights records.

4. Retention

Account and purchase records: while the account is active and as required by tax law.

AI generations and missions: while the account is active.

Waitlist: until we notify you or you ask to be deleted.

Cookie consent: up to 12 months, then we ask again.

5. Sharing

Processors: Neon (database), Cloudflare (hosting), Resend (email), Stripe (payments), and the LLM provider you configure for AI generations.

We do not sell personal information as defined by the CCPA. We do not share email lists with unrelated advertisers.

6. Your rights

GDPR: access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority.

CCPA: know, delete, and opt out of sale/share. We do not sell your data. Do-not-sell requests can be sent to support@onemission.online.

To exercise rights, email support@onemission.online from the address on the account.

7. International transfers

Infrastructure may be in the United States and the EU. Where required we use appropriate safeguards (standard contractual clauses).

8. Children

The product is not directed at anyone under 18.