Privacy policy

Who I am

This site is run by Joshua Santhosh, a Shopify developer in Jackson, Tennessee, USA. When this policy says “I” or “me,” that’s who it means. Questions about your data go to josh@joshuasanthosh.com.

What I collect

Mostly what you give me, plus a little about how you found the site:

• Your email address and store URL, when you fill in the form to start.
• Your store’s myshopify.com address, a collaborator request code if your store uses one, and any notes you add, after you pay.
• The basics of your payment from Stripe, such as your name, email and whether the payment went through. Your card details go to Stripe, and I never see your full card number.
• Where your visit came from: the campaign tags in the link you followed (like utm_source=tiktok), the site that referred you, and the page you landed on. These are sent with the start form and to Stripe, so I know which platform sent you.
• Anything you write in an email to me.

Analytics

The site uses Vercel Web Analytics and Speed Insights to count page views and measure how fast pages load. Neither uses cookies or identifies you personally. They record things like the page, the referring site, your country, and your browser and device type. The site also counts a few anonymous events, such as a button being pressed or the start form being sent, without recording who you are.

Cookies and browser storage

This site doesn’t set cookies. It uses your browser’s session storage for two conveniences: remembering where your visit came from, and refilling the start form if you come back to it. Session storage stays on your device and clears when you close the tab. Stripe’s checkout pages set their own cookies, which Stripe’s own policy covers.

How I use it

• To do the work: send your collaborator request, deliver the changes, and talk with you about them.
• To reply when you get in touch, and to follow up by email if you started the form but didn’t finish paying.
• To process payments and refunds, and to keep the records that taxes and accounting require.
• To understand which platforms send visitors, and to improve the site.

I don’t sell or rent your information, and I won’t add you to a mailing list without asking.

Your store

With Shopify collaborator access, I can see and change only what the permissions you approve allow, which is mostly your theme. I don’t need your customers’ personal data, and I don’t copy or export it. You can remove my access any time under Settings → Users in your Shopify admin.

Who it’s shared with

Only the services that run the site and the work, and only what each one needs:

• Vercel, which hosts the site and runs its analytics.
• Resend, which delivers form submissions to my inbox.
• Stripe, which handles payments and refunds.
• Shopify, through the collaborator request.
• My email provider, for our emails.

I’ll also share information if the law requires it.

How long I keep it

Form submissions and emails stay in my inbox for as long as they’re useful for the work and any follow-up questions. Payment records are kept as long as tax and accounting rules require. If you ask me to delete your information, I will, except for what I’m legally required to keep.

Your choices

Email josh@joshuasanthosh.com to ask what I have about you, to correct it, to delete it, or to stop hearing from me. You don’t need to give a reason, and I’ll reply within 30 days, usually much sooner.

Children

This site is for business owners. It isn’t meant for children, and I don’t knowingly collect information from anyone under 16.

Changes

If this policy changes, the new version goes on this page with a new date at the top.