Privacy Policy

MSA Design ("we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect when you use our customer portal, the MSA Design and MSA Console iOS apps, and related services, how we use that information, and the choices you have.

Information we collect

• Account details you provide at signup: name, business name, email, phone number, and password.
• Order, invoice, and payment activity tied to your account.
• Files and reference images you upload.
• Technical data: IP address, browser type, and pages visited (used for security and product improvement).

How we use your information

• To provide the customer portal and fulfill your orders and invoices.
• To communicate with you about your account, orders, payments, and support requests.
• To send SMS notifications you have opted in to receive (see our SMS Terms).
• To prevent fraud, secure the service, and comply with legal obligations.

SMS / mobile information

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

We use a third-party messaging provider (Twilio) solely to deliver SMS messages to your phone number. Twilio processes that data only to send the message and report delivery status to us. Your phone number is never sold, rented, or shared with marketers.

Mobile apps

• The apps ask for camera or photo library access only when you choose to attach a photo or scan a document. Nothing is read in the background, and you can change the permission at any time in iOS Settings.
• Push notifications are optional. If you enable them, Apple assigns your device a token that we store to deliver order, design, and message updates. Turn them off in your profile or in iOS Settings and the token is removed.
• The apps contain no advertising and no third-party analytics or tracking.

How we share information

We share information only as needed to operate the service:

• Service providers acting on our behalf: Supabase (database and sign-in), Cloudflare (file storage), Stripe (payments; card details are entered on Stripe's secure pages and never stored by us), Twilio (SMS delivery), and Apple (push delivery). They process data only to perform the contracted service.
• When required by law, court order, or to protect rights, safety, or property.
• In connection with a business transfer (merger, acquisition, asset sale), with notice where legally required.

We do not sell your personal information.

Your choices

• You can update your profile information at any time inside the portal.
• You can opt out of SMS messages at any time by replying STOP to any message we send, or by clearing the SMS opt-in toggle in your profile settings.
• You can delete your account from your profile in the app or portal, or by contacting us. Deletion is permanent once open orders and unpaid invoices are settled; we retain only what we are legally required to keep, such as issued invoices.

Data retention & security

We retain account and transaction data for as long as your account is active and as necessary to comply with legal, accounting, and reporting obligations. Data is stored on infrastructure protected by industry-standard access controls and encryption in transit (TLS).

Children

The service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this Privacy Policy. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through the portal or by email.

Contact

Questions about this policy or your data? Email [email protected] or reply to any communication you have received from us.