PRIVACY POLICY

Signn Applications LLC, operating under the trade name OSOTO ("we", "our", "us"), respects your privacy. This policy describes what personal information we collect when you use osoto.co, how we use it, and the choices you have. By using the site, you agree to this policy.

Information We Collect

We collect information you provide directly — your name, email address, shipping address, phone number, and account credentials when you create an account or place an order. When you complete a purchase, payment details (card number, expiration, CVC) are collected and processed by Stripe, our payment processor. We never see or store full card numbers on our servers.

We also collect limited technical information automatically: IP address, browser type, device information, and pages visited. This is used for security, fraud prevention, and understanding how the site is used.

How We Use It

• To process and fulfill your orders, including shipping and customer support.
• To send transactional emails (order confirmations, shipping updates, password resets).
• To send marketing emails, only if you've opted in — you can unsubscribe at any time.
• To improve the site, detect fraud, and comply with legal obligations.

Third Parties We Share With

We share the minimum information necessary with trusted service providers:

• Stripe — processes payments. Stripe's privacy policy governs how they handle your payment data.
• Resend — delivers transactional emails (order confirmations, password resets).
• Shipping carriers — receive your name and address to deliver your order.

We do not sell your personal information to anyone, ever.

Cookies

We use cookies to keep you logged in, remember your cart, and protect against cross-site request forgery (CSRF). These are strictly necessary and cannot be disabled without breaking site functionality.

Your Rights

You can request a copy of the personal data we hold on you, correct inaccurate information, or ask us to delete your account and data entirely. Email us at support@osoto.co and we'll respond within 30 days. Note that we may need to retain certain records (orders, invoices) for tax and legal compliance.

Data Security

The site runs over HTTPS and passwords are hashed with bcrypt. Payment data is handled exclusively by Stripe, which is PCI-DSS Level 1 compliant. No system is perfectly secure, but we take reasonable steps to protect your information.

Children's Privacy

The site is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we'll delete it.

Changes to This Policy

We may update this policy occasionally. Material changes will be announced on the site and, for registered customers, by email. The "Effective" date at the top reflects the most recent update.