Privacy Policy

This Privacy Policy describes how YAQIONG ZHU, an individual business owner operating under the BBJ WRAPS brand (the "Operator," "we," "us," or "our"), handles personal information in connection with BBJ WRAPS Florist Tools, including its website, account features, business-management tools, support, and paid subscription features (collectively, the "Service"). BBJ WRAPS and BBJ WRAPS Florist Tools are brand names and are not described in this policy as a corporation, limited liability company, or other separate legal entity. This policy does not govern the separate BBJ WRAPS online store or third-party services that publish their own privacy notices.

Florist Tools is designed for business users. A florist business that enters information about its own customers and delivery recipients decides what information to enter and how to use it. That florist business is responsible for providing any notices and obtaining any permissions required for its own collection and use of that information.

Account information. We collect the email address and authentication information needed to create and secure an account. Password authentication is provided through Supabase; the Service does not display your password to the Operator.

Business profile and support information. We may collect business settings, preferences, feedback, support messages, the page from which feedback was submitted, and a snapshot of the account email associated with that feedback.

Usage and technical information. The Service and its infrastructure providers may process device, browser, IP address, request, error, security, and session information needed to deliver, protect, troubleshoot, and operate the Service.

The Service stores information a florist chooses to create or import, such as recipes and images, cost-library items and cost history, inventory and purchase information, customers and important dates, orders and quick sales, historical business data, and reports derived from that information.

Orders and delivery tools may contain customer and recipient names, email addresses, phone numbers, delivery addresses, delivery timing, notes, item details, route information, and delivery status. This information belongs to the florist business that submitted it; it is not collected from recipients by the Operator for independent marketing.

Business-history files are parsed in the browser for review. Only the records the florist confirms for import are written to the Service database; the original CSV or spreadsheet file is not uploaded to database storage by that import workflow.

We use information to authenticate users; provide calculators, recipes, customer records, orders, deliveries, reporting, imports, and other requested features; administer plans and usage limits; process support and feedback; maintain security; prevent abuse; diagnose errors; and comply with applicable legal obligations.

We may use aggregated or de-identified information to understand and improve the Service when the information cannot reasonably identify a person. We do not use florist customer or recipient data to market directly to those customers or recipients.

Stripe processes subscription Checkout, recurring charges, invoices, payment methods, and the Customer Portal for the individual Operator. Stripe receives payment and billing information directly. The Operator does not receive or store full payment-card numbers. We receive limited subscription records such as the Stripe customer and subscription identifiers, selected plan, billing interval, subscription status, billing-period dates, and invoice status so that we can provide the correct access.

A manually activated 45-day Pro trial is maintained in the Service database, does not require a card, and is not a Stripe subscription.

We disclose information to service providers only as reasonably needed for them to perform services for us, subject to their applicable terms and privacy practices. Current categories include:

• Supabase for authentication, database services, and private image storage.
• Stripe for subscription Checkout, payment processing, billing records, and the Customer Portal.
• Vercel for application hosting, content delivery, and operational infrastructure.
• Google Maps Platform when delivery features are used. Depot and delivery addresses may be sent for geocoding; coordinates may be sent to calculate and optimize routes; and Google map code loads in the browser when an interactive map is displayed.
• Resend for authentication-related email delivery and notifications about feedback submitted through the Service.

We may also disclose information when required by law; to protect users, the Operator, or others; in connection with financing, a transfer or sale of the business or its assets, or a user's direction. We do not state that every disclosure is a "sale" or that no transfer ever occurs; legal classification depends on the applicable law and facts.

Account and florist business data are stored using Supabase services, with application hosting provided through Vercel. The Service uses authentication, tenant-scoped database access controls, private storage paths, and HTTPS-capable provider infrastructure. No method of storage or transmission is completely secure, and this policy does not claim a security certification that has not been independently established.

Users are responsible for protecting their credentials, restricting access to their devices, and entering only information they are authorized to use.

We retain account, business, subscription, security, and support information for as long as reasonably needed to provide the Service, maintain accurate business and billing records, resolve disputes, enforce agreements, protect the Service, and comply with law. Different categories may be retained for different periods.

The Service lets users delete or remove certain records, including recipes and orders, but it does not currently provide a self-service account-deletion workflow. You may request deletion of an account or personal information by emailing jean@bbj-wraps.com. Deletion may not immediately remove information from provider backups, logs, fraud-prevention records, billing records, or records we must keep for legal reasons.

Florist Tools uses essential cookies and similar storage needed for Supabase authentication, session continuity, security, and account functions. Stripe or Google may set or read their own cookies or similar technologies when their Checkout, Customer Portal, or map features are loaded.

As of the date above, the Florist Tools codebase does not include a separate advertising tracker or general-purpose behavioral analytics SDK. Infrastructure providers may still create operational logs and security measurements under their own notices. If we add non-essential analytics or advertising technology, we will update this policy and provide choices where required.

Depending on where you live and subject to legal exceptions, you may have rights to request access to, correction of, deletion of, or a copy of personal information, or to object to or restrict certain processing. You may update many business records directly in the Service and may cancel a paid subscription separately through Manage Billing.

To make a privacy request, email jean@bbj-wraps.com. We may need to verify your identity and authority. If you submit a request about information controlled by a florist business, we may direct you to that florist business. We will not discriminate against a person for exercising rights available under applicable law.

The Operator and service providers may process information in countries other than the country where a user, customer, or recipient is located, and those countries may have different data-protection laws. The actual processing locations depend on the services and infrastructure used. We do not promise that all data remains in one country or claim a specific transfer certification or contractual mechanism that has not been confirmed.

The Service is intended for business users and is not directed to children under 13. We do not knowingly collect personal information directly from children under 13 for their own use of the Service. If you believe a child has created an account or provided personal information directly to us, contact us so we can review the request.

We may update this Privacy Policy to reflect changes to the Service, providers, or legal requirements. We will post the updated version here and revise the "Last updated" date. If required by applicable law, we will provide additional notice before a material change takes effect.

YAQIONG ZHU is the individual Operator responsible for this policy and the Service's handling of personal information. Questions or privacy requests concerning BBJ WRAPS Florist Tools may be sent to jean@bbj-wraps.com or mailed to 85 W 5th Ave, Apt 412, San Mateo, CA, US. Please include enough information to identify the relevant account and request, but do not send passwords or full payment-card details by email.