Privacy Policy

This policy applies to STIKUP ("we," "us," "our") and the substra.shop website. By using the site or joining our waitlist, you agree to the practices described here.

We collect only what we need to run the business:

• Email address — when you join our waitlist or ask for launch updates.
• Order & contact details — at checkout: name, shipping and billing address, email, phone (optional), and order history. Card details are entered directly with our payment processor; we never see or store your full card number.
• Support messages — anything you send us by email or contact form.
• Usage & device data — collected automatically as you browse: IP address, browser and device type, pages viewed, and referring links, via cookies and similar technologies.

• Send the waitlist and launch updates you asked for.
• Process, fulfill, and support your orders and subscriptions.
• Operate, secure, and improve the site.
• Measure marketing and site performance in aggregate.
• Meet our legal, tax, and accounting obligations.

We do not sell or rent your personal information. We share it only with service providers that help us operate, and only as needed for them to do their work:

• Stripe — payment processing and subscription billing.
• Vercel — website hosting and performance analytics.
• Neon — our managed database.
• Our email provider — to send waitlist and transactional email.
• Google Analytics — aggregate site analytics, when enabled.

We may also disclose information if required by law, to enforce our terms, or to protect the rights and safety of our customers and business. If we're ever part of a merger or acquisition, information may transfer as part of that transaction.

STIKUP does not sell your personal information, and we do not share it for cross-context behavioral advertising in exchange for money or other value.

We use cookies and similar technologies to keep the site working (for example, your cart), remember preferences, and understand aggregate usage. You can block or delete cookies in your browser settings, though some features may not work without them.

Some browsers send a "Do Not Track" (DNT) signal. Because there is no common industry standard for how to respond, we do not currently respond to DNT signals. We treat your data the same way regardless of a DNT setting.

We keep personal information only as long as needed for the purposes above — to maintain your account and order history, and to meet legal, tax, and accounting requirements — after which we delete or anonymize it. You can ask us to remove your waitlist email at any time.

You can request access to, correction of, or deletion of your personal information, and you can unsubscribe from marketing email at any time using the link in any message or by emailing us. Depending on where you live — including California residents under CalOPPA and the CCPA/CPRA — you may have additional rights over your data. To exercise any of these, contact support@substra.shop and we'll respond within the time the law requires. We won't discriminate against you for exercising your rights.

We use reputable providers and reasonable safeguards to protect your information. No method of transmission or storage is perfectly secure, so we can't guarantee absolute security — but we work to protect your data and to limit who can access it.

Our products and site are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us their information, contact us and we'll delete it.

We may update this policy as the business grows or the law changes. When we do, we'll revise the "last updated" date above and, for material changes, post a more prominent notice on the site or email you. Continued use after an update means you accept the revised policy.

Questions about privacy? Email support@substra.shop.