Privacy Policy

1. Introduction

Small Factory Marketing Inc. ("Smallfactory", "we", "us", or "our") operates the Smallfactory platform at smallfactory.co. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Service.

We are a Canadian corporation and comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation.

2. Information We Collect

Information you provide

• Account information: Name, email address, and password when you create an account.
• Payment information: Payment details are handled by our third-party payment processor. We do not store your credit card number. We receive a customer identifier, subscription status, and billing metadata.
• Content: Images, screenshots, designs, and text you upload or create within the Service.
• Communications: Any messages you send to us via email or support channels.

Information collected automatically

• Usage data: Pages visited, features used, and actions taken within the Service.
• Device information: Browser type, operating system, and device type.
• IP address: Collected for security, authentication, and abuse prevention.
• Cookies and session data: We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Service.
• Process payments and manage subscriptions.
• Authenticate your identity and secure your account.
• Respond to support requests and communications.
• Send important service-related notices (e.g., security alerts, billing issues).
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

We do not use your information for advertising or sell it to third parties.

4. How We Share Your Information

We share your information only in the following circumstances:

• Service providers: We use trusted third-party providers for payment processing, hosting, data storage, and email delivery. These providers only access your data as necessary to perform their services and are contractually bound to protect it.
• Legal requirements: We may disclose your information if required by law, regulation, legal process, or government request.
• Business transfers: If Smallfactory is acquired, merged, or sells assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• With your consent: We may share information for other purposes with your explicit consent.

5. Data Storage and Security

• Location: Your data is stored on secure servers located in Canada, the United States, and other regions where our infrastructure providers operate. By using the Service, you consent to the transfer and processing of your data in these locations.
• Security measures: We implement industry-standard security measures including encrypted connections (HTTPS/TLS), hashed passwords, and access controls. However, no method of transmission or storage is 100% secure.
• Published content: When you use the publish/embed feature, the published images are stored on a publicly accessible CDN. These are accessible to anyone with the URL until you unpublish them.

6. Data Retention

• Active accounts: We retain your data for as long as your account is active.
• Cancelled subscriptions: After cancellation, your data is retained for 30 days before permanent deletion.
• Deleted accounts: Upon account deletion, we delete your personal information and content within 30 days, except where retention is required by law.
• Anonymized data: We may retain anonymized, aggregated data that cannot identify you for analytics and service improvement purposes.

7. Your Rights

Under PIPEDA and applicable privacy laws, you have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Data portability: Request your data in a structured, machine-readable format.
• Withdraw consent: Withdraw consent for non-essential processing at any time.

To exercise any of these rights, contact us at support@smallfactory.co. We will respond within 30 days.

8. Children's Privacy

The Service is not directed to children under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

9. International Users

If you access the Service from outside Canada, your information will be transferred to and processed in Canada and other jurisdictions where our service providers operate. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email. Your continued use of the Service after changes take effect constitutes acceptance of the revised policy.

11. Contact

If you have questions or concerns about this Privacy Policy or our data practices, contact us at:

Small Factory Marketing Inc.
support@smallfactory.co