Privacy Policy

1. Who We Are

This Privacy Policy describes how Tier One Business Services, LLC, a Pennsylvania-registered limited liability company doing business as MyCraftStore ("we," "us," or "our"), collects, uses, and protects information when you use our platform at mycraftstore.us (the "Platform"). This policy applies to store owners, buyers, affiliates, and all other visitors to our website.

If you have any questions about this policy, contact us at support@mycraftstore.us.

2. Information We Collect

We collect information in the following categories depending on how you interact with the Platform:

Account and Registration Information

• Name, email address, and password when you create an account
• Business name and store name when you open a store
• Tax identification number (SSN or EIN) for affiliate accounts, required for 1099 tax reporting
• Mailing address for affiliate commission payment purposes
• Phone number, if you choose to provide it for SMS order notifications

Transaction and Order Information

• Order details, including items purchased, quantities, and pricing
• Shipping and billing addresses provided at checkout
• Payment information — processed directly by Stripe; we do not store full card numbers
• Order history and fulfillment status

Store Owner and Affiliate Information

• Store configuration, branding, and product listings
• Store sales data and commission records
• Referral links and affiliate tracking data
• Commission payment method preferences (check, PayPal, or Venmo)

Communications and Preferences

• Messages you send through our contact form
• Email and SMS notification preferences you select in your account settings
• SMS opt-in consent, including the date and time of consent

Technical and Usage Information

• IP address and browser/device type when you visit the Platform
• Pages visited and actions taken on the Platform
• Cookies and session identifiers (see Section 8)

3. How We Use Your Information

We use the information we collect for the following purposes:

• To create and manage your account and store
• To process orders, payments, and refunds
• To calculate and pay affiliate commissions
• To send transactional emails such as order confirmations, shipping notifications, and password resets
• To send SMS notifications for new orders, if you have opted in (see Section 5)
• To comply with tax reporting obligations (e.g., IRS Form 1099)
• To detect and prevent fraud or unauthorized access
• To improve the functionality and performance of the Platform
• To respond to your inquiries and provide customer support

4. How We Do Not Use Your Information

We do not sell, rent, trade, or share your personal information with third parties for marketing or advertising purposes.

We do not use your personal information — including your phone number, email address, or purchasing behavior — for any form of targeted advertising, data brokering, or third-party marketing campaigns. Your information is used solely to operate and improve the Platform and to communicate with you about your account and transactions.

5. SMS Text Message Notifications

If you are a store owner or affiliate and choose to receive SMS notifications, the following terms apply:

Opt-In

SMS notifications are strictly opt-in. You provide your mobile phone number and check the "Text me when I receive a new order" option in your account settings. You will not receive SMS messages unless you have explicitly enabled this option.

Message Types

We send only transactional SMS messages — specifically, new-order notifications that alert you when a customer places an order in your store or purchases a product you supply through the Maker Network. We do not send promotional or marketing text messages.

Message Frequency

Message frequency varies depending on your order volume. You will receive one SMS per new order event.

Opt-Out

You may opt out at any time by unchecking the SMS notification option in your account settings, or by replying STOP to any SMS message you receive from us. After opting out, you will receive no further SMS messages from us until you re-enable the option. Reply HELP for help or contact us at support@mycraftstore.us.

No Sharing of SMS Consent Data

Your phone number and SMS opt-in consent information will not be shared with any third party for marketing purposes. This data is used solely to deliver transactional order notifications from MyCraftStore. The only third party that processes your phone number is Twilio, Inc., our SMS delivery provider, which acts as a data processor on our behalf under strict data processing terms.

Carrier Rates

Standard message and data rates may apply based on your mobile carrier plan.

6. Information Shared With Third Parties

We do not sell or share your personal information with third parties for their own marketing purposes. We share your information only in the following limited circumstances:

Service Providers (Data Processors)

We work with a small number of trusted third-party service providers who process data on our behalf to help us operate the Platform. These providers are bound by contractual obligations to protect your data and may not use it for any purpose other than providing services to us:

• Stripe, Inc. — payment processing. Stripe receives payment card data directly from buyers and is governed by Stripe's own Privacy Policy.
• Twilio, Inc. — SMS delivery for transactional order notifications. Twilio receives your phone number only when an SMS notification is triggered, and only to deliver that message.
• Resend / Amazon SES — transactional email delivery (order confirmations, shipping notifications, password resets).
• Cloudflare R2 / Amazon S3 — secure storage for uploaded images (store logos, product photos).

Legal Requirements

We may disclose your information if required to do so by law, court order, or government authority, or if we believe in good faith that disclosure is necessary to protect the rights, property, or safety of MyCraftStore, our users, or the public.

Business Transfer

In the event of a merger, acquisition, or sale of substantially all of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Platform before your information is transferred and becomes subject to a different privacy policy.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services to you. We also retain data as required by law — for example, transaction records and tax information are retained for a minimum of seven (7) years in accordance with IRS requirements.

If you close your account, we will delete or anonymize your personal information within a reasonable period, except for data we are required to retain by law.

8. Cookies and Tracking

We use cookies and similar technologies to keep you logged in, remember your session, and operate the Platform. We do not use advertising cookies or third-party tracking pixels for behavioral advertising.

• Session cookies — required to keep you authenticated while using the Platform
• Referral cookies — set when a visitor arrives via an affiliate link, used solely to attribute store sign-ups to the correct affiliate
• Preference cookies — used to remember settings such as your store appearance configuration

You can disable cookies in your browser settings, but doing so may prevent some features of the Platform from functioning correctly.

9. Data Security

We implement industry-standard security measures to protect your information, including encrypted data transmission (TLS/HTTPS), hashed password storage, JWT-based authentication with expiring tokens, and access controls that limit which team members can view sensitive data.

No method of transmission over the internet is 100% secure. While we take reasonable precautions to protect your data, we cannot guarantee absolute security.

10. Your Rights

Depending on your location, you may have the following rights with respect to your personal information:

• Access — request a copy of the personal information we hold about you
• Correction — request that we correct inaccurate information
• Deletion — request that we delete your account and personal information, subject to legal retention requirements
• Opt-out of SMS — unsubscribe from SMS messages at any time by replying STOP or updating your account settings
• Data portability — request your data in a portable format where technically feasible

To exercise any of these rights, contact us at support@mycraftstore.us. We will respond within 30 days.

11. Children's Privacy

The Platform is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Platform or by sending an email to the address on file for your account. Your continued use of the Platform after any changes constitutes your acceptance of the updated policy. The "Effective Date" at the top of this page reflects when the current version was last updated.

13. Contact Us

If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please contact us:

Tier One Business Services, LLC
doing business as MyCraftStore
Bensalem, Pennsylvania
support@mycraftstore.us