Privacy Policy

Plush Claw Co. (“we”, “us”) collects the information you give us when you book an event — your contact info, event details, and (if you choose to share it) photos and theme references. We use Square to process payments and Resend to send transactional email. We don’t sell your data and we don’t share it with advertisers.

When you book or contact us, we collect:

• Contact details: name, email, phone number, and (optionally) company name.
• Event details: date, venue, guest count, theme, color palette, prize preferences, and any notes you share.
• Payment info: when you pay your deposit or final balance, the actual card data goes directly to Square, our payment processor. We do not see or store your card number, expiration, or CVV. We only see whether the payment succeeded and an internal Square reference ID.
• Account info (admins only): for ops users managing the business, we store your email and role.

• To plan, execute, and follow up on your event booking.
• To send you transactional emails (booking confirmation, payment receipts, balance invoice reminders).
• To coordinate logistics with your venue if needed (only what you’ve given us permission to share).
• To improve our service over time based on aggregated, anonymized patterns (e.g. how many bookings per month, popular themes).

We do not sell your data, share it with advertisers, or use it for marketing to third parties.

We use a small number of trusted third parties to operate the site. Each holds your data only as needed to perform their specific job:

• Square — payment processing. They store payment-method data under PCI standards. Square’s privacy policy →
• Supabase — database hosting for your booking details, photos, and account records. Data is stored in U.S. data centers. Supabase’s privacy policy →
• Resend — transactional email delivery (booking confirmations, magic-link sign-ins). Resend’s privacy policy →
• Vercel — hosting infrastructure for the website itself. Vercel’s privacy policy →

We retain booking records and customer details indefinitely so we can serve you again, provide history, and meet tax/accounting obligations. You can request deletion at any time by emailing info@plushclawco.com — we’ll remove your records within 30 days, subject to legal retention requirements (we may need to keep payment records for tax purposes).

You can email us at any time to:

• Get a copy of the data we have about you.
• Correct any inaccurate information.
• Request deletion of your data.
• Opt out of future marketing (if we ever start sending it).

Contact us at info@plushclawco.com for any of the above.

All site traffic is encrypted via HTTPS. Payment data is never stored on our servers — it goes directly to Square. Our database is protected by Supabase’s security standards, including encrypted-at-rest storage. Access to the operational dashboard requires email-based magic-link authentication on an allowlist of approved admins.

We use a single session cookie to keep ops users signed in. We do not use third-party advertising trackers or social-media pixels. We may add basic privacy-friendly analytics (Vercel Analytics or similar) in the future to understand site usage; if and when we do, we’ll update this page.

Our site and services are intended for adults booking events. We do not knowingly collect information from anyone under 18. If you believe a child has provided us information, please contact us.

We may update this Privacy Policy from time to time. When we do, we’ll change the “Last updated” date at the top. Material changes will be communicated by email to active customers.

Questions about this Privacy Policy or how we handle your data? info@plushclawco.com