Privacy Policy
Your information helps us grow, deliver, and keep you informed.
Effective October 16, 2026
Information you share with us
We collect information needed for your order or account, including your name, email, phone number, delivery address and instructions, plan and mix selections, account identity, subscription changes, delivery records, and customer-service messages. We also record the policy version and time of agreement when a new order is submitted.
Launch-list signup records include your email, consent status, signup and confirmation times, and unsubscribe preference. Temporary hashed network identifiers help prevent abusive signups.
How we use it
We use your information to review and fulfill orders, verify delivery eligibility, manage your account and plan, process authorized payments and refunds, coordinate delivery, send service messages, respond to questions, maintain business records, and help prevent misuse.
Services that help us operate
We use Stripe for payment processing, Supabase for customer sign-in, Resend for email, and our website hosting provider for the site and stored order records. Payment-card details are entered with Stripe; our order database stores payment references and status, not complete card numbers.
We may provide your name, phone number, address, delivery instructions, and relevant order details to Shipday and delivery personnel as needed to coordinate your delivery. Information may also be disclosed when required by law or reasonably necessary to protect our business or customers. We do not sell your personal information.
Order messages and optional marketing
Service emails cover orders, payments, delivery status, account or subscription changes, and remaining-delivery reminders. Delivery services may send order-related text notifications. We do not use text messages for marketing.
Marketing email is optional and separate from placing an order. The current launch signup is for launch updates only and requires email confirmation. It does not automatically enroll you in a broader newsletter. Fresh Notes has its own optional signup and email confirmation for monthly recipes, tips, and business news. We store your email, consent and confirmation dates, and newsletter delivery records to manage that subscription.
Unsubscribe using the link in a marketing email or contact us. Unsubscribing from marketing does not stop necessary order or account messages. We retain a minimal unsubscribe record to respect your choice.
Cookies, browser storage, and service logs
Our website and its service providers use cookies or similar browser storage for sign-in, account sessions, security, and core website functions. Hosting and service providers may process technical information such as network, device, and request details when operating and protecting their services.
Browser controls can limit cookies and storage, but doing so may affect sign-in and other features. If we introduce additional analytics or advertising tools, we will update this notice to describe the relevant use and choices.
Retention and your requests
We retain information as needed to provide service, maintain business and payment records, resolve disputes, prevent misuse, and meet applicable obligations. Some records may need to remain after an account is closed.
Email tinyleafclub@gmail.com to request access, a correction, account closure, or deletion of information. We may need to verify your identity before acting. Delivery-address changes are reviewed for service eligibility.
Questions and updates
Contact Tiny Leaf Club at tinyleafclub@gmail.com with privacy questions. This notice applies to our customer website, launch list, and Fresh Notes newsletter. We will post updates here with a new effective date when our practices change.
Questions? tinyleafclub@gmail.com
