Privacy Policy

1. Introduction and Overview

Modapaya LLC dba Rhinely ("Company," "we," "us," or "our"), based in Dallas, Texas, is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, Designer application, and fulfillment services (collectively, the "Services").

By accessing or using our Services, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with our practices, please do not use our Services.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

• Name, email address, and password
• Profile information and preferences
• Company or business name (if applicable)
• Phone number (optional, for delivery communications)

Payment Information:

• Credit/debit card numbers, billing address, and payment details
• PayPal account information (if used)
• Note: Payment card data is processed securely by our payment processors (Stripe, PayPal) and is not stored on our servers

Order and Transaction Information:

• Shipping addresses
• Order history and purchase records
• Design files and content you upload
• Product preferences and customizations

Communications:

• Emails and messages you send to customer support
• Survey responses and feedback
• Marketing preferences

2.2 Information Collected Automatically

Device and Technical Information:

• IP address and approximate geographic location
• Browser type, version, and language
• Operating system and device type
• Screen resolution and display settings
• Referring website or source

Usage Information:

• Pages visited and features used
• Time spent on pages and click patterns
• Search queries within the Services
• Errors and performance data
• Actions taken in the Designer application

Cookies and Similar Technologies:

• Essential cookies for signing in, your cart and checkout, security, and remembering your cookie choice
• First-party cookies that note how you first reached Rhinely (for example, the referring site or campaign) and which affiliate referred you
• Analytics or marketing cookies only if you allow them in Cookie settings
• See our Cookie Policy for each cookie and how long it lasts

Other Information You Give Us:

• Prompts you enter in our AI design tools, and the images they create
• Reference images and details you send with a quote request
• Your email address if you subscribe to our newsletter
• If you join our affiliate program: your application, and the payout details you give us (such as a PayPal email address or bank details)

2.3 Information from Third Parties

• Information from sign-in providers (Google or X) if you choose to sign in with them
• Payment verification information from payment processors
• Shipping and delivery information from carriers
• Fraud detection and prevention data from security services

2.4 E-Commerce Platform Data

If you connect an e-commerce platform (such as Etsy or Shopify) to your Rhinely account, we may access and process the following data from your store with your explicit authorization:

• Shop Information: Shop name, shop ID, and store URL
• Listing Data: Product listings, titles, descriptions, images, pricing, and inventory managed through Rhinely
• Order Data: Order IDs, line items, quantities, customer shipping addresses, and transaction details for orders that require Rhinely fulfillment
• Customer Information: Names and shipping addresses of customers who place orders through your connected store, used solely for fulfillment and shipping purposes

How we use this data:

• To sync product listings between Rhinely and your connected store
• To receive and process incoming orders for production and fulfillment
• To push tracking information and fulfillment status back to the platform
• To calculate pricing and generate fulfillment invoices

Data retention: Platform data is retained as long as your store remains connected. When you disconnect your store, we retain completed order records for legal and accounting purposes but cease accessing new data from the platform. OAuth access tokens are deleted upon disconnection.

We do not sell your Platform customer data. We share it only with service providers that help us fulfill your orders (such as our shipping label provider, hosting and email providers) and with the shipping carriers that deliver them. All Platform data access complies with each platform's API Terms of Use and developer policies.

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Providing and Operating Services

• Create and manage your account
• Process and fulfill your orders
• Provide customer support
• Enable features of the Designer application
• Store and manage your designs

3.2 Communications

• Send order confirmations and shipping updates
• Respond to inquiries and support requests
• Send important account notifications
• Send marketing emails about our products and offers to account holders and newsletter subscribers. Every marketing email has a one-click unsubscribe link, and unsubscribing stops them

3.3 Improving Our Services

• Analyze usage patterns and trends
• Develop new features and products
• Optimize performance and user experience
• Conduct research and analytics

3.4 Security and Protection

• Detect and prevent fraud, abuse, and security threats
• Verify identity and authenticate users
• Protect our rights and property
• Enforce our Terms of Service

3.5 Legal Compliance

• Comply with legal obligations and court orders
• Respond to lawful requests from authorities
• Establish, exercise, or defend legal claims

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

• Contract Performance: Processing necessary to fulfill our contract with you (account management, order processing)
• Legitimate Interests: Processing necessary for our legitimate business interests (security, fraud prevention, analytics, marketing to existing customers)
• Consent: Processing based on your explicit consent (marketing emails, cookies)
• Legal Obligation: Processing necessary to comply with legal requirements (tax records, law enforcement requests)

5. Information Sharing and Disclosure

5.1 Service Providers

We share information with trusted third-party service providers who assist in operating our Services:

• Payment Processors: Stripe (cards and subscriptions) and PayPal (checkout)
• Shipping: Shippo (shipping labels and tracking) and the carriers that deliver orders (USPS, UPS, FedEx)
• Hosting: DigitalOcean (servers and data storage)
• Email: Resend (delivery of our emails) and our email and customer support tools
• Security: Google reCAPTCHA (protecting our forms from spam and abuse)
• Sign-in: Google and X, if you choose to sign in with them
• AI Design Tools: Ideogram (receives the prompts you enter to create images)
• E-Commerce Platforms: Etsy and Shopify, when you connect your store

These providers process information to provide their services to us, under their own terms and privacy commitments.

5.2 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of the transaction. We will notify you of any such change and any choices you may have.

5.3 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Rhinely, our users, or others.

5.4 With Your Consent

We may share your information for other purposes with your explicit consent.

5.5 What We Do NOT Do

WE DO NOT SELL YOUR PERSONAL INFORMATION TO THIRD PARTIES.

We do not share your personal information with third parties for their direct marketing purposes without your consent. We don't currently use advertising cookies or share personal information for cross-context behavioral advertising; if we start, it will only be with your consent, and you'll be able to change your mind at any time (see Your Privacy Choices).

6. Data Retention

We retain your information for as long as necessary to:

• Provide the Services and fulfill our contractual obligations
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements
• Maintain business records for audit purposes

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, tax, or fraud prevention purposes.

Design files may be retained in backups for a reasonable period after deletion for technical recovery purposes.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption: Data in transit is protected with SSL/TLS encryption
• Access Controls: Strict access controls and authentication requirements
• Secure Storage: Data is stored in secure, monitored data centers
• Regular Assessments: Periodic security reviews and vulnerability testing
• Employee Training: Staff are trained on data protection practices
• Incident Response: Procedures for responding to security incidents

While we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights and Choices

8.1 General Rights (All Users)

• Access: You can access and update your account information through your account settings
• Marketing Opt-Out: Unsubscribe from marketing emails via the link in each email
• Cookie Preferences: Change your cookie choices anytime with the Cookie settings link at the bottom of every page, or through your browser settings (see Cookie Policy)
• Account Deletion: Delete your account from your account settings, or ask us at contact@rhinely.com

8.2 European Economic Area (GDPR Rights)

If you are in the EEA, you have the following additional rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Request limitation of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at contact@rhinely.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

8.3 California Residents (CCPA Rights)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected about you
• Right to Delete: Request deletion of personal information we have collected
• Right to Correct: Ask us to correct inaccurate personal information
• Right to Opt-Out of Sale or Sharing: We do not sell personal information or share it for cross-context behavioral advertising. We treat a Global Privacy Control signal from your browser as a request to opt out
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To submit a request, contact us at contact@rhinely.com. We may need to verify your identity before processing your request.

8.4 Your Privacy Choices

• Cookies: Choose which cookies we use, and change your choice anytime: open Cookie settings. Analytics and marketing cookies are off unless you turn them on.
• Global Privacy Control: If your browser sends a Global Privacy Control (GPC) signal, we treat it as your request to opt out of the sale or sharing of your personal information, and we don't set marketing cookies for that browser.
• Marketing email: Use the unsubscribe link in any marketing email.
• Your information: To ask for a copy of your information, or to correct or delete it, email contact@rhinely.com. We may need to verify your identity first.

9. International Data Transfers

Rhinely is based in the United States. If you access our Services from outside the US, your information will be transferred to, stored, and processed in the United States.

By using our Services, you consent to the transfer of your information to the United States and other countries that may have different data protection laws than your jurisdiction.

For EEA users, we ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses approved by the European Commission where applicable.

10. Children's Privacy

Our Services are intended for adults 18 and older and are not directed to children. We do not knowingly collect personal information from children under 13 (or 16 in the EEA). If we learn that we have collected information from a child under the applicable age, we will delete it promptly.

If you believe a child has provided us with personal information, please contact us at contact@rhinely.com.

11. Third-Party Links and Services

Our Services may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.

12. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature. Due to the lack of a common industry standard, we do not currently respond to DNT signals. We do honor the Global Privacy Control (GPC) signal, as described in Your Privacy Choices.

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

• Posting the updated policy with a new "Last Updated" date
• Sending an email notification for significant changes
• Displaying a notice when you log in

Your continued use of the Services after such changes constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Modapaya LLC dba Rhinely
10610 Metric Drive #156, Dallas, TX 75243, USA
Email: contact@rhinely.com

For GDPR-related inquiries, you may also contact your local data protection authority.