What we keep, and how to get rid of it

If you generate a mockup

If you generate a free storefront mockup, we keep the email address and business name you enter, the logo file you upload, the mockup image we generate from it, and a record of which steps you reached — for example that a mockup was generated, or that you opened the project-start page.

If you arrive from a campaign link we also store the campaign details from that URL. We do not use advertising cookies, we do not run third-party analytics scripts, and we do not track your browsing anywhere other than on this site.

Why we keep it

So we can send you your mockup, so you are not asked for the same details twice if you come back, and so we can reply when you contact us about building your storefront. We do not add you to a newsletter or a marketing list, and we do not sell your details, rent them, or share them with anyone for their own marketing.

If you start a project

Paying a deposit starts a StoreKeyed project, run through one private project link. From then on we also keep:

• Your project record and private link. Your email, business name, the dates and status of your project, the notices we send you, and a step-by-step log of the project. Your private project link (storekeyed.com/key/…) is stored only as a one-way fingerprint, so our database cannot recreate it. Opening it gives your browser a secure session cookie tied to that one project.
• Your acceptance at checkout. When you accept the General Terms of Service and the Deposit and Project Initiation Policy, we record the version of each document and its SHA-256 fingerprint, the time, your email, your IP address and browser details, and the Stripe checkout reference.
• Your electronic signature. When you sign your Project Scope Agreement, we record the name you type, your email, the agreement version and its fingerprint, your consents and acknowledgements, the time, your IP address and browser details, and a copy of the signed agreement that is never changed afterwards.
• Your uploaded materials. Logos, photos, product files, documents, and questionnaire answers you provide at your project link are kept in private storage. Nobody can browse them or open them without a short-lived link that our server issues to you or to the people building your store.
• Your payments. Stripe tells us each payment’s amount, status, and reference. We never see or store your card details.
• Your support-chat messages. Messages you type into the support chat are sent from our server to OpenAI to write an answer, together with a short read-only note of your project’s stage and key dates. Your files, questionnaire answers, and credentials are never sent. We ask OpenAI not to store the conversation, although OpenAI may keep API data for a limited period for abuse monitoring under its own policies. We do not keep chat transcripts; when a question is passed to a person, we keep the first 500 characters of that message with your project and email it to our support inbox. Please don’t send passwords or other secrets through the chat.

Who processes it for us

A small number of service providers, each only for its part of the service: Supabase (database and private file storage), Netlify (website hosting and server functions), Stripe (payments), Resend (sending email), OpenAI (support-chat answers), and Loom (hosting the optional welcome video). They process your information on our behalf under their own terms. We do not sell it.

How long we keep it

Mockups and leads: we aim to delete mockups, uploaded logos and prospect records within twelve months of your last contact with us.

Project records: project records, checkout acceptances, signed agreements and signature evidence, notices, and payment records are kept for seven years after your project closes. They are our contract, tax, and dispute records, and signed evidence is locked so it cannot be edited or deleted during that time. Support-chat messages passed to a person are kept with the project record.

Uploaded materials and deliverable files: we aim to delete them twelve months after your project closes, so you can still come back for them until then. Ask us and we will delete them sooner.

Being straight with you about the limits of that: deletion runs as a periodic job rather than something the database enforces on its own, so a file can occasionally outlive the window — if the job fails, if a record was removed without its file, or because it still sits in a routine backup. We are not going to pretend that never happens.

If that matters to you, ask us and we will remove it. That is a better guarantee than a schedule.

Who can see your logo

Your logo and generated mockup are stored at long, unguessable web addresses so the mockup can appear in the email we send you. The storage cannot be browsed or listed — nobody can page through other people’s files — but anyone holding the exact address of a file can open it. Treat the mockup link we email you the way you would treat any link: shareable if you want it shared. (Project materials are different: they sit in private storage, as described above.)

Asking for deletion

Email hello@storekeyed.com and say so. You do not need a reason and you do not need to explain yourself. We will delete your record, your uploaded logo and your generated mockup, and confirm when it is done.

If you started a project, we delete everything we are not required to keep. Signed agreements, acceptance records, and payment records stay for the retention period above, because they show what was agreed and paid; we will tell you exactly which records those are.

You can also ask what we hold about you, and we will tell you.

Who we are

StoreKeyed is a product of VVV Digitals LLC. Reach us at hello@storekeyed.com. The terms of a project are in the General Terms of Service and the Deposit and Project Initiation Policy.