Privacy policy

• Business details. Company name, contact name, email, phone, billing and shipping addresses, business type and website.
• Reseller verification. Your seller's or reseller permit number and state, the permit document you upload, and the resale certificate you sign, including the name, title, date and IP address recorded with it.
• Orders. What you ordered, invoice and payment status, shipping and tracking.
• Account and support. Your login, and any message you send us through the site or by email.

We do not collect personal information about your own retail customers, and we never see or store your full card or bank account numbers.

To review your application, verify that you are a reseller, confirm and ship your orders, issue and collect invoices, provide support, keep the tax and business records the law requires, and prevent fraud or abuse of the site.

We email you about your own account and orders. We do not sell or rent your information, and we do not share it with other customers.

We use a small number of service providers, each only for the job it does:

• Stripe — payment processing and invoicing. Card and bank details go to Stripe directly and are held by Stripe under its own privacy policy, not by us.
• Supabase — the database and file storage where your account, orders and permit upload are kept.
• Vercel — hosting for this website.
• Shipping carriers and our label provider — the name, address and contact needed to deliver your order.
• Email delivery — to send account and order email.
• Cloudflare Turnstile — to tell real applicants from bots on our forms.

We may also disclose information where the law requires it, or to protect our rights, our customers or the security of the site.

Your permit upload is stored in a private bucket. It is not public, it is not linked from anywhere on the site, and it can only be opened by our staff through a short-lived link generated at the moment of viewing. We keep it as evidence that a sale was made for resale.

Order, invoice and resale-certificate records are kept as long as tax and business record-keeping rules require, which in California is generally at least four years. Account details are kept while your account is open. If you close your account, we delete what we are not required to keep.

Access is restricted to the people who need it. Data is encrypted in transit, the database enforces row-level access so an account can only ever see its own records, and internal fields such as cost and margin are never served to customer accounts. No system is perfect, but we treat your information as we would want ours treated.

We use cookies only to keep you signed in and to keep your cart. We do not run advertising or cross-site tracking cookies.

You can view and update most of your details on your account page at any time. Email us to request a copy of what we hold, to correct something, or to close your account and have your information deleted, subject to the records we are required to retain. California residents may have additional rights under state privacy law; we will honor them and we do not sell personal information.

This is a wholesale site for businesses. It is not directed at children and we do not knowingly collect their information.

If this policy changes, the date at the top changes with it. Material changes will be notified by email.