Privacy notice
How Kangaroo Pop processes applicant, operator, shopper, order, and media data.
Effective August 30, 2026Data we process
Kangaroo Pop processes account identity, business details, workspace permissions, audit records, store configuration, order references, shipping addresses, uploaded media, generated proofs, support records, device and request metadata, and provider identifiers. Hosted payment providers process card details; Kangaroo Pop does not store raw card numbers.
Why we use it
Data is used to authenticate operators, create and operate stores, generate and render requested designs, complete orders, prevent abuse, reconcile payments, provide support, comply with legal duties, and improve platform reliability.
Service providers
Processing may involve Google, Stripe, hosting and database providers, Cloudflare R2, OpenAI, Resend, Sentry, carriers, and the fulfillment provider assigned to an order. A connected provider receives only the shopper, item, destination, print-asset, and case information needed to produce and deliver that work. It does not receive customer workspace membership, merchant credentials, unrelated stores, or customer administration rights.
Retention and security
Source uploads and generated previews normally receive a 30-day deletion target. Print, order, payment-reference, dispute, audit, and compliance records may be retained longer when required for fulfillment, recovery, security, or law. Private media is not served from a public bucket.
Choices and contact
Operators may update business data through the workbench. Shoppers and applicants may request access, correction, or deletion through the seller or james@stratastudio.dev. Some records must be retained for completed transactions, fraud prevention, disputes, or legal compliance.