Privacy Policy

Last updated: August 14, 2026

This Privacy Policy explains how Molding Studio collects, uses, shares, and protects information when you visit moldingstudioco.com, create an account, request a quote or invoice, place or manage an order, subscribe to updates, or contact us.

Information we collect

We collect information you provide, such as your name, email address, telephone number, company, project details, uploaded files, billing and delivery addresses, account details, newsletter preference, and messages. For quotes, invoices, payments, refunds, delivery, and support, we also process cart contents, product and quantity details, prices, taxes, payment status, order history, tracking information, and related correspondence.

We collect limited technical and security information, such as IP address, browser and device information, request timestamps, security challenge results, application errors, and pseudonymous cart or rate-limit identifiers. Our self-hosted analytics is configured to receive allowlisted public page paths without query strings or fragments.

How we use information

  • Provide accounts, carts, quotes, finalized invoices, payments, refunds, orders, delivery, and customer support.
  • Calculate applicable taxes, prevent fraud and abuse, secure the website, diagnose errors, and maintain service reliability.
  • Send transactional messages and, only when requested, newsletter communications.
  • Keep business, tax, accounting, dispute, and compliance records and enforce our terms.
  • Understand aggregate use of public storefront pages and improve our products and website.

Service providers

We use a virtual private server to host the storefront and operational database. We use Cloudflare for DNS, content delivery, security, Turnstile bot checks, object storage, and encrypted offsite backups; Clerk for account authentication; Stripe for hosted invoices, payments, refunds, and Stripe Tax; Resend for transactional email and newsletter contacts; Upstash for managed Redis used for carts and abuse prevention; Sentry for error monitoring; and a self-hosted Matomo installation for limited storefront analytics. These providers process information on our instructions and under their own service terms. Information may be processed in countries other than your own, subject to the safeguards available through the relevant provider and applicable law.

We may also disclose information when required by law, to protect rights or safety, in connection with a business transaction, or with your direction. We do not sell personal information or use it for third-party behavioral advertising.

Payments and taxes

Stripe hosts invoice payment pages and processes payment credentials. Molding Studio does not receive complete card numbers. Stripe may use billing, delivery, transaction, and device information to process payments, prevent fraud, and calculate tax. Stripe's privacy terms apply to its own processing.

Email and marketing

Resend delivers order, invoice, refund, delivery, quote, contact, and account-related messages. If you subscribe to our newsletter, we store your email and subscription status for that purpose. You can unsubscribe through the link in a marketing message or contact us. Unsubscribing from marketing does not stop necessary transactional messages.

Cookies, local storage, and analytics

We use technologies required for account authentication, cart continuity, security, payment flows, and user preferences. Clerk, Stripe, Cloudflare, and Turnstile may set or read essential cookies when their features are used. Matomo is configured without analytics cookies, honors browser Do Not Track signals, anonymizes IP addresses, and tracks only specifically allowlisted public storefront paths. We do not send arbitrary URL query strings or fragments to Matomo. Search text may be measured only after separate sanitization.

Retention

We retain information only as long as reasonably needed for the purposes described above, including legal, tax, accounting, fraud-prevention, warranty, support, and dispute obligations. Matomo visitor data is retained for 13 months. Encrypted offsite database backups are retained for up to 90 days and then expire under the backup policy. Account, order, invoice, payment, refund, and correspondence records may be retained longer when required for business or legal purposes. Provider-side logs and records follow the applicable provider configuration and contractual terms.

Security

We use measures designed to protect information, including encrypted connections, restricted administrative access, provider authentication, network controls, monitoring, and encrypted offsite backups. No method of storage or transmission can be guaranteed completely secure.

Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. These rights can be subject to legal exceptions, including records we must retain. You can manage certain account information through your account and can enable Do Not Track in your browser for our Matomo analytics.

Children

The website is intended for business and home-improvement customers and is not directed to children. We do not knowingly collect personal information from children where parental consent would be required.

Changes to this policy

We may update this policy as our services or legal obligations change. We will post the revised version here and update the date above.

Contact us

For privacy questions or requests, contact Molding Studio at [email protected].