Privacy Policy

1. Introduction

This Privacy Policy describes how Lampstand Digital LLC ("Company," "we," "us," or "our"), doing business as Artos, collects, uses, and discloses your information when you use our website and marketplace platform (the "Service").

We are based in New Hampshire, USA. By accessing or using the Service, you consent to the data practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not use the Service.

2. Information We Collect

We collect information necessary to operate a safe, community-focused marketplace. This includes data you provide directly, data collected automatically, and data from third-party sources.

A. Information You Provide

• Account Registration: When you sign up, we collect your name, email address, and username. Authentication is handled securely on our servers using the Better Auth library; we do not store raw passwords, only secure hashes.
• Seller Verification (Sensitive Data): To maintain Artos as a safe harbor for the Eastern Orthodox community, Sellers must attest to their faith. We collect the name of your Parish and Priest to verify this affiliation. Note: This is considered sensitive personal data. We verify this manually or via limited audit and do not use it for marketing.
• Shop & Business Information: If you are a Seller, we collect your Shop Name, Description, Logo, Return Policy, and Business Address (for shipping calculations).
• Transaction Data:
  • Customers: We collect your Shipping Address to fulfill orders. We never store your credit card numbers; payment data is processed directly by Stripe.
  • Sellers: To receive payouts, you must provide banking and tax information directly to Stripe via Stripe Connect. We do not see or store your full bank account details.
• Communications: We store messages sent through our "Contact Seller" feature and chats with our support team (via Crisp).

B. Information Collected Automatically

• Log & Performance Data: We use Axiom and Sentry to collect logs and error reports. This may include your IP address, browser type, operating system, and details about crashes or bugs you experience.
• Analytics & Usage: We use Crisp to analyze how users interact with our platform and to provide customer support chat. This allows us to improve user experience and features.
• Cookies: We use essential cookies for session management (keeping you logged in) and functional cookies to remember your preferences (like "Dark Mode").

3. How We Use Your Information

We use your data for the following specific purposes:

1. Service Operation: To create accounts, process transactions, calculate shipping rates, and deliver digital downloads.
2. Community Integrity: To verify Seller eligibility (Orthodox affiliation) in accordance with our Terms of Service.
3. Support & Communication: To send transactional emails (via Resend) such as order confirmations, shipping updates, and password resets, and to respond to support inquiries (via Crisp).
4. Platform Stability: To monitor system health, debug errors (via Sentry), and prevent fraud.
5. Legal Compliance: To comply with tax laws, legal processes, and enforce our Terms of Service.

4. Sharing Your Information

We do not sell your personal data. We share information only as follows:

A. Between Users

• Customers to Sellers: When a Customer places an order, the Seller receives the Customer's Name and Shipping Address strictly for fulfillment purposes.
• Sellers to Customers: Sellers' business names and return addresses may be visible on shipping labels.

B. Third-Party Service Providers (Sub-Processors)

We share data with specific processors who perform services on our behalf. These providers are contractually obligated to protect your data:

C. Legal Requirements

We may disclose your information if required to do so by law or in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend the rights or property of Lampstand Digital LLC, or protect the personal safety of users of the Service.

5. Children's Privacy

• Customers: Our Service is generally intended for users over the age of 18. However, minors may use the Service to purchase items only with the involvement and consent of a parent or legal guardian.
• Sellers: To sell on Artos, you must be at least 18 years old to enter into a legally binding contract with us and our payment processor (Stripe).

If we discover that a child under 13 has provided us with personal information without parental consent, we will delete such information from our servers immediately.

6. Data Retention

We retain personal data only as long as necessary:

• Account Data: Retained while your account is active.
• Transaction Records: Retained for at least 7 years to comply with tax and accounting laws (IRS requirements).
• Verification Data: Seller parish/priest information is retained as long as the shop is active to maintain "Safe Harbor" status.
• Deletion: You may request account deletion by contacting support. Note that we must retain financial transaction records even after account deletion.

7. Security

We employ industry-standard security measures:

• Encryption: All data in transit is encrypted via SSL/TLS.
• Access Control: Sensitive data (like verification details) is accessible only to authorized administrators.
• Payment Security: We never touch or store raw credit card data; it is handled entirely by Stripe's PCI-DSS compliant infrastructure.

While we strive to use commercially acceptable means to protect your Personal Data, essentially no method of transmission over the Internet is 100% secure.

8. Your Rights & Choices

Depending on your location, you may have rights regarding your data:

• Access & Update: You can access and update your profile, address book, and shop settings directly in your Dashboard.
• Opt-Out: You can manage email notification preferences in your Account Settings. You generally cannot opt out of critical transactional emails (e.g., "Order Confirmation").
• Deletion: You may request that we delete your personal data, subject to our legal obligations to retain financial records.

9. International Transfers

If you are accessing our Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States where our servers and central database are located. By using the Service, you consent to this transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Continued use of the Service after such changes constitutes your acknowledgment of the new policy.

11. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: