Privacy Policy

Last updated: September 27, 2026

Nino Canvas ve Nino Üretici mobil gizlilik açıklaması

1. Information we collect

When you place an order through a connected marketplace, including Etsy or our YDCanvas Amazon store, we receive the information required to fulfill that order: your name, shipping address, carrier-required contact information, and order details. We do not receive marketplace payment-card details.

2. How we use your information

We use your information solely to:

• Fulfill and ship your order
• Communicate with you about your order
• Comply with legal obligations (tax, customs)

3. Information sharing

We use Vercel to host the application, Supabase for authentication and database services, and Cloudflare R2 for protected file storage. We provide only the recipient and parcel information required by the selected carrier, such as FedEx or DHL. When our staff paste a free-text shipping address into the system, we use the OpenAI API only to convert that text into structured address fields; OpenAI processes it on our behalf, and its API terms state that API data is not used to train its models. We do not sell, rent, or share marketplace customer information with unrelated sellers or advertisers.

4. Data retention

Amazon recipient PII, including recipient name, delivery address, telephone number, buyer email, and shipping-label files, is retained for no longer than 30 days after shipment and is then deleted or irreversibly redacted. Tax and accounting records may be retained when legally required, but those retained records exclude Amazon recipient shipping PII.

5. Amazon information

Nino Canvas is a private integration used only for the YDCanvas selling account. Amazon customer information is collected directly from Amazon Selling Partner API and used only to fulfill merchant-fulfilled orders, prepare carrier labels, communicate about delivery when permitted, and submit shipment tracking. Access is limited to individually authenticated personnel who need the information for fulfillment. Amazon credentials are stored as server-side secrets and are not returned to browsers or included in source code.

Amazon information is encrypted in transit with TLS and at rest by our managed service providers. Amazon recipient data is prohibited from public repositories, removable-media archives, development fixtures, screenshots, and issue trackers. The only generative-AI processing of recipient data is the address-structuring step described in section 3.

6. Your rights

Under GDPR and similar laws, you have the right to access, correct, or delete your personal data. To exercise these rights, contact us at info@ninocanvas.com.

7. Cookies

Our website uses only essential cookies required for basic functionality. We do not use tracking or advertising cookies.

8. Contact and security incidents

For privacy requests or security incidents, contact Yunus Demirbag at info@ydcanvas.com. Incidents involving Amazon information are reported to Amazon within 24 hours of detection as required by Amazon policy.