Privacy policy | TUNICAE

Who we are

TUNICAE is operated by Spirad LLC, registered in Wyoming, US. When this policy says "we", "us", or "our", it means Spirad LLC.

Information we collect

We only collect what's necessary to run the store and improve it:

Order details: name, shipping/billing address, email, phone, and the items you bought.
Payment information: processed entirely by Stripe — we never see or store your card number.
Browsing data: pages you visit, the marketing campaign that referred you (UTM parameters, fbclid, etc.), the device and browser you use, and your approximate location based on IP. Stored in cookies and localStorage on your device.
Communications: emails you send us, support tickets, customer-service notes.

How we use it

To process and ship your orders.
To send transactional emails (receipts, shipping confirmations, delivery updates).
To send marketing emails when you've opted in. You can unsubscribe at the bottom of every marketing email.
To measure how our marketing performs and improve the site — things like "did this ad campaign drive sales?"
To prevent fraud and abuse.
To comply with legal obligations (tax filings, court orders, etc.).

Cookies and tracking

We use three categories of cookies and storage:

Essential: required for the cart and checkout to work. Cannot be disabled.
Analytics: page views, conversion tracking, and ad attribution. Used to measure ad performance.
Marketing: Meta Pixel and similar advertising pixels that let us show relevant ads on platforms like Facebook, Instagram, and Google.

Who we share your data with

We share only what's needed with the following service providers:

Stripe — payment processing
Resend — sending transactional emails
Meta (Facebook/Instagram) — ad attribution via the Pixel and Conversions API
Shipping carriers — to fulfill your order
Hosting providers (Vercel, Supabase) — to run the site and store data

We don't sell your personal information to third parties. We don't share it for purposes outside fulfilling your order, supporting you, or measuring our own marketing.

Data retention

Order records are kept for at least 7 years to satisfy tax and accounting obligations. Other personal data (e.g. account info) is deleted when you ask us to.

Your rights

Depending on where you live (GDPR in the EU/UK, CCPA in California, and similar laws elsewhere), you may have the right to:

Request a copy of the personal data we hold about you.
Ask us to correct inaccurate information.
Ask us to delete your data, subject to retention obligations above.
Object to or restrict certain processing.
Withdraw consent for marketing emails at any time.

To exercise any of these rights, email us at onboarding@resend.dev. We typically respond within 5 business days.

International transfers

Our servers are located in the United States. If you're outside the US, your data is processed on US-based infrastructure operated by the providers listed above.

Children

Our products and services are not directed to anyone under 13 (or under 16 in the EU). We don't knowingly collect data from minors.

Changes to this policy

We'll update this page when our practices change. The "Last updated" date at the top reflects the most recent change. Material changes will also be announced via email to active customers.