Privacy Policy

We collect the following categories of information:

Contact & shipping details. Name, email address, phone number, and shipping address you provide to place and fulfill an order.

Order & customization data. Products selected, options chosen, order notes, uploaded artwork and files, quantities, and applied discounts.

Wallet & blockchain data. Public wallet addresses you connect, the wallet provider used (Xaman/XUMM or WalletConnect/Joey), NFT identifiers and traits, and on-chain ownership information used to verify holdings, claims, and discounts.

Payment data. Card and similar payments are processed by Shopify at checkout; we do not store full card numbers. Crypto payments (XRP/RLUSD) are recorded as public on-chain transactions along with the order amount and status.

Technical & log data. Basic information generated when you use the Services, such as device and browser information, IP address, and request logs, used for security and operation.

Administrator accounts. Staff sign in to our admin tools through Supabase Auth; this applies to our team only, not to shoppers.

We use the information we collect to:

produce, process, and fulfill orders; calculate shipping rates and generate labels; verify NFT/wallet holdings and apply eligible claims, rewards, and discounts; process XRP/RLUSD and Shopify payments; provide customer support; prevent fraud and abuse; keep records; operate, secure, and improve the Services; and comply with legal obligations.

We do not sell your personal information. We share it with service providers that process data on our behalf to run the Services:

Supabase — database hosting and administrator authentication.
Shopify — checkout, payment processing, and order fulfillment.
Xaman (XUMM) — XRPL wallet connection and transaction signing.
WalletConnect — wallet connection for compatible (Joey) wallets.
Bithomp — XRPL NFT ownership and mint-date verification.
Hedera Mirror Node — NFT ownership verification for Hedera-based token gating.
Shippo — shipping rates and label generation.
Google Maps — address autocomplete at checkout.
CoinGecko / Binance — live XRP price data.
Vercel — website and application hosting.

We may also disclose information to comply with law, enforce our Terms, or protect the rights, safety, and property of Calco Labs, our users, or others. If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

When you connect a wallet or make a crypto payment, your wallet address and transactions exist on public blockchains (such as the XRP Ledger and Hedera). On-chain data is public, permanent, and outside our control, and cannot be changed or deleted by us.

We keep order, customer, claim, and discount records for as long as needed to fulfill orders, provide support, prevent fraud, and meet legal, accounting, and recordkeeping obligations, after which we delete or anonymize the information. Public on-chain data cannot be deleted.

We use reasonable technical and organizational measures to protect information, including access controls and an administrator allowlist for internal tools. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You may request access to, correction of, or deletion of personal information we hold about you by contacting us, subject to legal and recordkeeping limits and the fact that on-chain data cannot be removed. You can choose not to connect a wallet or provide certain information, though some features may then be unavailable. Depending on where you live, you may have additional rights under applicable privacy laws.

The Services are intended for users who are at least 18 years old and are not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Your continued use of the Services after changes take effect constitutes acceptance of the updated policy.

For privacy questions or requests, contact hello@calcolabs.com.