← SulitShelf PH

PRIVACY · DATA SUBJECT RIGHTS

Privacy Notice

Last updated September 18, 2026

Who controls your data

SulitShelf PH operates this service. Privacy questions and data-subject requests may be sent to delacruzedward735@gmail.com.

Data we process

Account identity and authentication metadata; promoter shop and listing content; subscription and payment metadata; commission-import results; support/CRM messages; security and audit events; and privacy-preserving aggregate analytics. Passwords, recovery codes, and authenticator secrets are stored only in protected derived or encrypted forms.

Why we process it

To provide accounts and storefronts, secure sign-in, operate subscriptions and payments, measure marketplace performance, prevent abuse, communicate about the service, satisfy requests, maintain auditability, and establish or defend legitimate claims.

Service providers

Depending on enabled features, processors or independent service providers may include Render for application/database hosting, Cloudinary for image storage, PayMongo for subscription payments, configured email delivery providers, and Google/GitHub/Facebook when you choose social sign-in.

Retention

Security grants and raw operational analytics are minimized on a schedule. Resolved privacy-request records are retained for a bounded period. Transaction, billing, security, and audit evidence may be retained longer where necessary for contractual, legal, fraud-prevention, accounting, or claims purposes. Backups age out under the documented disaster-recovery schedule.

Your choices and rights

You may request access, correction, objection, blocking or erasure where applicable, and a portable copy of personal data provided to or observed by the service. Requests can require identity verification and may be limited where continued retention or processing is authorized or required.

Sign in to privacy center →

Security and automated signals

SulitShelf uses security controls such as rate limits, session revocation, MFA, integrity-protected audit logging, and short-lived anonymous analytics deduplication. Trending and click metrics are aggregate marketplace signals; they are not used to make legal or similarly significant decisions about individuals.