Privacy Policy

1. Information We Collect

From Creators: We collect your email address to sign in, your storefront profile name, and storefront content you provide, such as product files, cover images, descriptions and prices. You provide your banking, tax and identity verification information directly to Stripe. Oak receives information about your Stripe connection and whether your account is ready to accept payments (see Section 4).

Product activity: We may record when you complete signup, create a storefront or first publish a product to understand which features are being used.

Referral program: We record referral codes, who referred a creator, the referral terms applied to that account, plan invoices and refunds, and recorded referral payouts. This lets us attribute referrals and calculate commission.

Storefront visits: We record storefront and product-page visits and referral sources to provide Creators with traffic statistics.

Google Calendar, from Creators who offer 1:1 calls: if you connect Google Calendar, Oak Store asks Google for two permissions: to see when you are busy (free/busy times only, never event titles, details or guests), and to create, update and remove events on one calendar Oak Store adds to your account, called "Oak bookings". Oak Store uses this only to show Buyers your open times and to put booked calls, with a Google Meet link, on that calendar. Oak Store never reads, changes or deletes any other calendar or event, never uses this data for advertising, and never sells it or shares it for unrelated purposes. You can disconnect in Oak Store to remove the stored credentials, or revoke Oak Store's access in your Google Account.

Oak Store's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

If you choose Zoom for a call, we create, move and delete a Zoom meeting for each of its bookings in your Zoom account. We read only your Zoom account's email and plan, never your other meetings, recordings or chats. Disconnecting Zoom deletes your connection credentials. We keep the meeting link and its Zoom account reference with your booking so we can manage it when you reconnect the same account.

Instagram Comment DMs: If you connect Instagram, we use your account information and matching comments to send the replies you configure. We store connection credentials and records of matching comments and replies to operate this feature. We do not store comment text or read your other messages. You can disconnect in Comment DMs to delete the stored access token and stop automated replies.

Support and optional AI drafting: If you contact us, we keep the information you provide to respond to your request. The dashboard support chat uses Crisp and receives your account email and display name. If you use AI drafting, we send the notes and relevant storefront or product details used for that draft to our AI drafting provider.

From Buyers: We collect the checkout or free-claim details requested by the Creator, such as your name and email, along with your order and delivery records. The Creator may configure additional fields for their product. For paid purchases, you enter your card information directly into Stripe's checkout. Oak does not receive or store your full card number.

Sign-in security: We collect IP address and browser information to help secure sign-in and prevent abuse.

Buyers do not need an Oak Store account. Checkout and claim forms ask for the fields the Creator has configured for that product. We also process order, delivery and security information as described in this Policy.

2. How We Use Information

We use the information above to:

• Display storefronts, process checkout, deliver digital products and support service orders and call bookings.
• Send transactional email, such as receipts, delivery instructions, booking updates and creator sale notifications, through Resend.
• Detect and prevent fraud, abuse, and security issues.
• Provide Creators with sales and visitor analytics about their own storefront.
• Keep order, payment and refund records to manage purchases and related support.
• Improve and maintain the Platform.

We do not sell personal information, and we do not use Buyer or Creator data for third-party advertising.

3. Email Updates

Information a Buyer provides at checkout or claim is collected for that transaction — to deliver the product and let the Creator handle related support. It does not subscribe the Buyer to marketing. If a Buyer chooses new product updates, Oak emails them when that Creator publishes a new product. Each update includes an unsubscribe link. Unsubscribing stops new product updates from that storefront, not order or delivery emails.

4. How We Share Information

We share your checkout or claim details and related order information with the Creator you purchase or claim from, so they can fulfil the order and provide support.

We share information with the following categories of service providers, only as needed to run the Platform:

• Stripe — payment processing, identity verification, and payouts for Creators. Stripe collects and holds Creator banking/tax details and Buyer payment details directly; see Stripe's Privacy Policy.
• Hosting and storage providers — run the application, store account and transaction records, and privately store uploaded files.
• Resend — delivery of transactional email.
• Google — calendar services and Google Meet for Creators who connect Google Calendar. We share booking details, including the Buyer's name and email, to create calendar events and meeting links.
• Meta (Instagram) — for Creators who connect Instagram: Oak Store sends Meta the private reply and public reply you wrote, addressed to the comment that triggered it.
• Crisp — dashboard support chat, including your account email, display name and messages you send.
• Datafast — traffic statistics, as described in Section 5, and the product activity events described in Section 1.
• Our AI drafting provider — optional AI drafting, using the information described in Section 1.

If you were referred to Oak, the creator who referred you can see your storefront name, referral date, plan status, monthly plan price while paying, and commission earned from your plan payments. The referral report does not share your email address, products or sales.

We may also disclose information if required by law, to enforce these policies, or to protect the rights, property, or safety of Oak Store, our users, or the public. If Oak Store is ever involved in a merger, acquisition, or asset sale, user information may transfer as part of that transaction, subject to this Policy's commitments.

5. Cookies and Analytics

We use cookies to keep Creators signed in and keep Buyer checkout sessions working. The dashboard support chat also uses cookies or similar storage to maintain the chat session. On creator storefronts and product pages, a cookie helps us attribute visits and orders to referral sources.

When you visit an Oak public page or sign-up page through a valid referral link, we set a first-party cookie called oak_ref for 30 days. It remembers the first valid referral code so we can credit the creator who referred you if you start an account. A later link does not replace an existing referral cookie.

On Oak's public pages, such as the landing page, help pages and playbooks, Datafast measures traffic to help us understand how those pages are used. This analytics script does not run on the dashboard, sign-in, checkout or download pages. The product activity events described in Section 1 are sent separately by our server when enabled.

6. Data Retention

We keep Oak account information and order records to operate accounts, manage purchases and provide related support. Order records include the product ordered, order amount, payment status, payment references and refund history. Closing a Creator account removes its active Oak account and order records and schedules uploaded files for deletion. Records held by Stripe and other service providers are handled under their own policies.

Accounting records needed to calculate referral earnings, refunds and recorded payouts may be retained after an account closes; deleting the account does not erase amounts already earned or paid.

Your Instagram access token is kept while your account is connected and deleted when you disconnect. Your keyword rules and the record of replies sent are kept so they return if you reconnect. When you ask Instagram to delete your data from Oak Store, or close your Oak Store account, Oak Store deletes your connection, keyword rules and reply records for that account.

7. Security

We use private file storage and encryption in transit to protect your information. Authorized Oak Store personnel access uploaded files only when needed to operate the Platform, respond to a support request, investigate a security or abuse issue, or comply with the law. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security.

8. Your Rights

Creators can delete products from the dashboard or close their account in account settings. Product deletion removes the product from the storefront; some records remain to support undo and existing orders. Account closure is handled as described in Section 6. Depending on where you live, you may also have the right to access, correct, export or delete your personal information, or object to certain processing. Contact us at superbrewllc@gmail.com to make a request. We will verify your request and respond within the time required by applicable law. Some security records may remain after account closure, such as records of customer-data exports.

9. International Data Transfers

Our application and database infrastructure is hosted in the United States. If you access the Platform from outside the United States, your information will be transferred to and processed there.

10. Children's Privacy

The Platform is not directed to children under 13 (or the minimum age required by your local law), and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us at superbrewllc@gmail.com and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated "Last updated" date.

12. Contact

Questions about this Policy, or to exercise your data rights: superbrewllc@gmail.com.