Privacy Policy

Ms. Sonoma ("we"). Contact: outreach@mssonoma.com

Data We Collect

• Account and authentication data
• Payment tokens via Stripe (we do not store card numbers)
• Logs and basic analytics (none enabled currently)
• Learner content and progress

Use, Sharing, Retention

We use data to operate the service. Subprocessors: Stripe (payments), Supabase (auth/db/storage), Vercel (hosting/CDN). Retention: account life + 12 months; logs 90 days; backups 30 days.

Children’s Privacy

For learners as young as 4: accounts are managed by a parent/facilitator. We do not allow children to create accounts. Parents may request access or deletion via outreach@mssonoma.com.

Security

Encryption in transit/at rest; role‑based access; least privilege; incident response via outreach@mssonoma.com.

International Transfers

We use SCCs/DPA for EU/UK users where applicable.

Your Rights

Contact outreach@mssonoma.com for access, correction, deletion, or export requests.