The store may store account details, wishlist records, order history, support messages, fulfillment status, and payment references.

Customer account areas are private and protected by Supabase Auth.

Payment card details are handled by Stripe Checkout and are not stored directly in the Vasato application database.

Stripe webhook events are used to verify successful, failed, or updated payment states.

This starter privacy page should be replaced or reviewed with legal-approved copy before production launch.