Privacy Policy (DRAFT)

DRAFT. Last updated: [DATE]. [Lawyer to review and complete.]

Who we are

[DRAFT] Elf Autopilot ("we") operates elfautopilot.com and app.elfautopilot.com. Contact: hello@elfautopilot.com.

What we collect

• [DRAFT] Parent account info: first name, email, optional mobile number.
• [DRAFT] Household info supplied by the parent: elf name, children's first names and ages, props owned, effort level.
• [DRAFT] SMS consent records: the consent wording shown, time of consent, and opt-out status.
• [DRAFT] Photos the parent chooses to upload to their private journal.
• [DRAFT] Basic site analytics and referral info (e.g. UTM parameters).

Children's information

[DRAFT] All information about children is supplied by a parent or guardian, not by children. Children do not use the service. We do not require photos of children. Journal photos are private to the household and are never shown publicly without an explicit share action by the parent. [Lawyer: confirm COPPA position and wording.]

Text messages

[DRAFT] If you provide a mobile number and opt in, we send recurring reminder texts during your elf season. Msg & data rates may apply. Reply STOP to opt out or HELP for help. We do not sell or share your mobile number or SMS opt-in data with third parties for marketing purposes. [Lawyer: confirm carrier-required language.]

How we use and share information

[DRAFT] [Service providers: hosting, database (Supabase), payments (Stripe), SMS (Twilio), email (Resend). Purposes, retention, and no sale of personal data.]

Affiliate links

[DRAFT] As an Amazon Associate we earn from qualifying purchases. [Describe affiliate link tracking.]

Your choices and rights

[DRAFT] [Access, correction, deletion requests; state privacy rights (e.g. California); how to contact us.]

Changes

[DRAFT] [How we notify users of changes.]