Draft · pending legal review

At tknp.io (operated by TKNP, Inc., Delaware via Stripe Atlas), we collect the minimum data needed to run your community store, deliver orders, and improve the platform. This policy follows the EU General Data Protection Regulation (GDPR) and is the source of truth for any data interaction with our services.

1. Data we collect

From visitors

  • Anonymous analytics (page views, referrer, viewport) via privacy-preserving tooling
  • Cookie preferences when you interact with our consent banner

From customers

  • Email address (for order confirmation + tracking)
  • Shipping name + address (for delivery)
  • Payment data (handled by Stripe — we never see card numbers)
  • Order history (linked to email)

From store owners (creators)

  • Organization name, legal name and billing address, VAT number where provided
  • Contact email and phone for account communication
  • Stripe Connect account ID for payouts
  • Generated content (product images, descriptions, brand colors)

2. How we use it

  • Service delivery: process orders, ship products, send transactional emails (Resend), payouts (Stripe Connect)
  • Verification: cross-check community status with public registries (RNA, federations) before a store goes live
  • Improvement: aggregate analytics to understand which pages convert, what content resonates
  • Support: respond to your inquiries when you contact us

3. Where it lives

Our primary database (Supabase) is hosted in EU (Frankfurt). Stripe processes payments in the EEA. Email transactional via Resend. Image generation via Anthropic Claude + Fal.ai (passes prompts only, never personal data). All inter-service calls are TLS-encrypted.

4. Your rights (GDPR)

  • Access: request a copy of your data — privacy@tknp.io
  • Rectification: ask us to correct any inaccurate field
  • Erasure: request deletion (we'll honor unless legally required to retain — e.g. accounting records 10y in FR)
  • Portability: receive your data in JSON format
  • Object: opt out of any non-essential processing (analytics, marketing)
  • Complain: lodge a complaint with the CNIL (FR DPA) if you believe we mishandled your data

5. Cookies

See our Cookies Policy for the full breakdown. Short version: we use strictly necessary cookies (session, cart) by default, and request explicit consent for analytics and marketing cookies.

6. Retention

Customer data is retained for the duration of the customer relationship + 3 years for marketing purposes (or until you object). Order data is retained 10 years for accounting compliance (French commercial code). Anonymous analytics: 13 months max.

7. Contact

Data Protection Officer: privacy@tknp.io. Postal: TKNP, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA.