Privacy Policy

Last Updated: November 25, 2025

Holy Smokas ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website creation services.

1. Information We Collect

We collect information you provide directly to us, including:

• Contact Information: Name, email address, phone number, and business name
• Payment Information: Processed securely through Stripe (we do not store credit card details)
• Business Information: Website requirements, logos, content, and preferences you submit
• Account Information: Login credentials when you create an account
• Google Drive Data: If you connect Google Drive, we access only files and folders created by our application for your website

2. How We Use Your Information

We use the information we collect to:

• Create and deploy your custom website
• Process payments and send transaction confirmations
• Communicate with you about your project and provide customer support
• Store and manage your uploaded content (images, products) via Google Drive integration
• Send you important updates about your website and our services
• Improve our services and develop new features

3. Google Drive Integration

When you connect your Google Drive account:

• We only access files and folders created by Holy Smokas for your website
• We use the drive.file scope, which limits access to only files our app creates
• We do NOT access your personal Drive files, documents, or other data
• You can disconnect Google Drive at any time from your dashboard
• Your uploaded images are stored in YOUR Google Drive, giving you full ownership and control

4. Information Sharing

We do not sell, trade, or rent your personal information. We may share your information with:

• Service Providers: Third parties that help us operate our business (Stripe for payments, GitHub for hosting, Google for Drive storage)
• Legal Requirements: When required by law or to protect our rights

5. Data Security

We implement appropriate security measures to protect your personal information, including:

• SSL/TLS encryption for all data transmission
• Secure OAuth 2.0 authentication for Google Drive
• Encrypted storage of authentication tokens
• Regular security updates and monitoring

6. Your Rights

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and associated data
• Disconnect third-party integrations (like Google Drive) at any time
• Opt out of marketing communications

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services. You may request deletion of your data by contacting us at contact@holysmokas.com.

8. Cookies

We use essential cookies to maintain your session and preferences. We do not use tracking or advertising cookies.

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: contact@holysmokas.com
• Phone: (415) 691-7085