Privacy Policy

This privacy policy describes how Bonny Creations ("we", "us", or "our") collects, uses, and protects your information when you visit bonnycreations.com.

1. Information We Collect

We collect information in the following ways:

• At checkout: your name and email address are collected to process your order and deliver your digital download.
• Google OAuth login: if you sign in with Google, we receive only your email address. We do not store your Google password or access other Google account data.
• Usage analytics: we use Google Analytics 4 (GA4) and Microsoft Clarity to understand how visitors interact with the site. This data is aggregated and does not personally identify you.

2. How We Use Your Information

• Process your orders and deliver digital files.
• Send transactional emails such as order confirmations and download links.
• Authenticate your account when you return to the site.
• Analyze site usage to improve content, performance, and user experience.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

We use the following third-party services, each governed by their own privacy policies:

• Stripe — payment processing. We never see or store your full card details; they are handled entirely by Stripe.
• Google OAuth — optional sign-in via your Google account.
• Resend — transactional email delivery (order confirmations, download links).
• Vercel — website hosting and serverless function infrastructure.
• Google Analytics 4 (GA4) — anonymous traffic and behavior analytics.
• Microsoft Clarity — session recording and heatmap analytics to improve usability.

4. Data Storage

Order and account data (name, email, purchase history) is stored in a Neon PostgreSQL database hosted in the United States. Digital product files are stored in Cloudflare R2 object storage. Both providers employ industry-standard encryption at rest and in transit.

5. Your Rights

You have the right to request access to or deletion of your personal data at any time. To do so, email us at gvwallace52@gmail.com with the subject line "Data Deletion Request". We will respond within 14 days.

6. Cookies

We use two categories of cookies:

• Session cookies — required for login. These expire when you close your browser or after a set session period.
• Analytics cookies — set by Google Analytics 4 and Microsoft Clarity to track aggregate usage. You can opt out via your browser's cookie settings or by using a browser extension such as the Google Analytics Opt-out Add-on.

7. Contact

If you have any questions about this privacy policy, please contact us at gvwallace52@gmail.com.