1. Who we are

Fierce Shop Manager ("F.S.M.", "the Service") is operated by Fierce Panda Prints LLC, a California limited liability company located at 185 Maple Ave, Beaumont, CA 92223 ("we", "us", "our").

This policy covers the website at fierceshopman.com, the application at fierceshopman.com/app, and the customer proof pages we host on your behalf.

2. Two kinds of data, and who is responsible for each

This distinction matters, so we are putting it near the top.

Kind of data	Who decides what happens to it
Account data. The email address you sign up with, your role in your shop, your billing details if you pay us, and the technical logs our hosting providers keep.	We do. We are the controller of this data and this policy governs it.
Shop data. Everything you type or upload: your customers and their contact details, quotes, jobs, pricing tables, payments you record, artwork, condition photos, and anything else in your shop's account.	You do. You are the controller. We hold and process it on your behalf, on your instructions, so the Service works. We do not decide what you collect or why.

If your shop records information about your own customers, your relationship with those people is yours to manage, including telling them what you collect and honoring any request they make of you. We will help you fulfill such a request, but we will not respond directly to your customers about your data.

3. What we collect

You give us

• Account information: your email address and password. Passwords are hashed by our authentication provider; we never see or store the plain text.
• Shop profile: shop name, address, phone, website, payment options and logo, as you enter them. These appear on the invoices you send.
• Shop data: customer records, quotes, invoices, jobs, pricing tables, duties, suppliers, stock, payments, credits and refunds, as described above.
• Files: artwork, proofs and vehicle condition photos you upload. Images are resized for display and stored in our file storage; where you have connected Google Drive, the original file is also copied to your own Drive.
• Messages to us: anything you send by email when you ask for help.

We collect automatically

• Technical logs: IP address, browser type, pages requested and timestamps, kept by our hosting providers for security and troubleshooting.
• Session storage: a login session token so you stay signed in, and small preferences (such as which panels you left open) stored in your browser. We do not use advertising cookies, and we do not run third-party analytics or tracking pixels.

We do not collect

• Card numbers or bank account numbers. The Service records that a payment happened and how much; it does not process payments or store payment instrument details.
• Any special category of personal information about you, such as health or biometric data.

4. How we use it

We use account data to run the Service: to sign you in, to keep your shop separate from other shops, to send you transactional messages about your account, to bill you if you are on a paid plan, to prevent abuse, and to respond when you contact us.

We use shop data only to provide the Service to you: storing it, displaying it back to you, calculating what you asked us to calculate, generating the documents you generate, and sending the messages you send.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not use your shop data, your customers' information or your uploaded files to train machine learning models. We may produce aggregate, de-identified statistics about how the Service is used overall, which contain no personal information and cannot be traced back to you or your customers.

Access by our staff. We access the contents of your shop only when you ask us to help with a specific problem, when we must in order to fix a fault or protect the security of the Service, or when the law requires it.

5. Who we share it with

We use a small number of service providers, each handling a specific part of the Service. They process data on our instructions and are not permitted to use it for their own purposes.

Provider	What they do for us	What they hold
Supabase	Database, login and file storage	Account data and all shop data, including uploaded images
Vercel	Website and application hosting	Technical logs; data in transit
Resend	Sending invoice and quote emails	The recipient address, subject and contents of emails you send
Google LLC	Drive file archiving — only if your shop connects it	The original files your shop uploads, stored in your own Google account

We may also disclose information if we are legally required to, if we must to protect our rights or someone's safety, or in connection with a merger or sale of our business — in which case we will give notice before your information becomes subject to a different policy.

6. Google Drive

Connecting Google Drive is optional and off by default. If a shop owner connects it:

• We request a single permission, drive.file. That permission lets the Service see and manage only the files it creates itself in your Drive. It does not give us the ability to read, search or list anything else in your Google account.
• The file you upload is transferred from your browser directly to Google. It does not pass through our servers.
• We store a token that lets the Service keep uploading to your Drive. It is encrypted before it is stored, and it is kept where no browser and no other shop can reach it.
• You can disconnect at any time from Settings → Files, or revoke our access from your Google Account's security settings. Files already placed in your Drive stay there and remain yours.

Limited Use. Fierce Shop Manager's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, we do not allow humans to read it except where required for security, to comply with law, or with your explicit consent, and we do not use it to train generalized artificial intelligence models.

7. Proof links and shared pages

The Service lets you send a customer a link so they can approve a proof without creating an account. Anyone who has that link can view that proof. Treat the link as you would any unlisted web address: send it to the person who needs it, and be aware that it can be forwarded. The link shows only the proof and the job it belongs to — it does not expose your pricing, your other customers or anything else in your shop.

8. How we protect it

• All traffic is encrypted in transit using HTTPS.
• Every record carries the identity of the shop that owns it, and the database enforces that separation at the row level, not just in the application. A query from one shop cannot return another shop's rows.
• Access inside a shop is limited by role: owner, staff, or view-only.
• Secrets such as the Google Drive token are encrypted before storage and are readable only by our server, never by a browser.

No service is perfectly secure. We cannot guarantee that unauthorized access will never occur. If a breach affects your data, we will notify you as required by applicable law.

9. How long we keep it

We keep your shop data for as long as your account is open, because that is the point of the Service.

If you close your account, we will delete your shop's data within 30 days of your written request, except where we must keep something to comply with a legal obligation or resolve a dispute. Backups may persist for a short period after that and are overwritten on a rolling basis.

You can export your data at any time while your account is open. Files you have archived to your own Google Drive are unaffected by anything that happens to your account here.

10. Your choices and rights

You may, at any time:

• See and correct your account information and your shop data directly in the app.
• Export your data.
• Ask us to delete your account and the data in it.
• Disconnect Google Drive, or change which address your shop sends invoices from.
• Ask us what personal information we hold about you and request a copy.

Write to accounting@fiercepandaprints.com. We may need to verify your identity before acting. We will not discriminate against you for exercising any of these rights.

Requests about information a shop holds about its customers should go to that shop, not to us. We will forward such a request if we receive it and can identify the shop.

11. California residents

If you are a California resident, you may have rights under the California Consumer Privacy Act as amended, including the right to know what personal information is collected, used and disclosed; the right to delete it; the right to correct it; and the right to opt out of its sale or sharing.

We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is nothing to opt out of. We have not done so in the preceding twelve months.

The categories we collect are described in section 3 and the business purposes in section 4. Use the contact details in section 15 to make a request.

12. Children

The Service is a business tool and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, write to us and we will delete it.

13. Where data is stored

The Service and its providers store data on servers in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to, stored in and processed in the United States, where privacy laws may differ from those in your country.

14. Changes to this policy

We may update this policy as the Service changes. When we do, we will revise the date at the top. If a change materially affects how we handle your information, we will give notice in the app or by email before it takes effect. Continuing to use the Service after a change means you accept the updated policy.

15. Contact us

Fierce Panda Prints LLC
185 Maple Ave, Beaumont, CA 92223
accounting@fiercepandaprints.com
714-777-3355