Privacy Policy

This Privacy Policy explains how Veronata, Inc. (“Veronata,” “we,” “us”) collects, uses, and shares information about you when you use Tadula at tadula.com(the “Service”). If you prefer the short version, here it is: we collect what we need to ship you a tongue scraper and email you about it, nothing more. We do not sell your data.

What we collect

From sign-in. When you sign in with Google, we receive your name, email address, profile picture, and Google account identifier. We do not request any other Google scopes.

From the waitlist. Your email address and, optionally, the source you came from (a TikTok or Instagram link, for example, if the URL included a tracking parameter).

From purchases. Your shipping address, the items you ordered, the date and amount of each order, and a Stripe-provided identifier that lets us charge your saved payment method. We never see or store your full card number, expiration date, or CVV.

From your use of the site. Vercel Analytics records anonymous, aggregated page views and basic performance metrics. We do not use any cross-site advertising or tracking pixels.

What we do with it

• Operate your account and fulfill your orders.
• Send transactional emails: waitlist confirmation, shipping notices, subscription pre-ship reminders, and password or account changes.
• Send founder updates and shipping news (only if you opted in). You can opt out at any time from your dashboard.
• Improve the Service. We may look at anonymized, aggregated analytics to understand which pages people read and where the site is slow.
• Comply with legal obligations, such as tax reporting.

Who we share it with

We do not sell your personal information. We share it only with service providers who help us run the Service, under contractual obligations to protect it:

• Google, for sign-in. Google’s use of information is governed by Google’s Privacy Policy.
• Stripe, for payment processing.
• Convex, for database and backend hosting. We store your account record and order history in Convex.
• Vercel, for website hosting and anonymized analytics.
• Resend, for transactional email delivery.

How long we keep it

We keep your account information for as long as your account is active. If you delete your account, we keep an order-history record for seven years to comply with tax and accounting obligations, then delete it. Marketing-email preferences are honored immediately on opt-out.

Your rights

You can:

• View or update most of your information from your dashboard at tadula.com/dashboard.
• Opt out of marketing emails at any time, from the dashboard or by replying “unsubscribe” to any marketing email.
• Request a copy of your data or ask us to delete it by emailing privacy@tadula.com. We will respond within 30 days.

If you live in California, the EEA, the UK, or another jurisdiction with specific data-protection rights, those rights apply to you. Email us at the address above and we will honor them.

Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If you believe we have collected information from a child under 13, contact us and we will delete it.

Security

We use industry-standard practices to protect your information, including TLS in transit and encryption at rest for sensitive fields. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Changes to this policy

If we make material changes to this policy, we will email you at the address associated with your account and update the “last updated” date above.

Contact

Questions about this policy? Email privacy@tadula.com or write to:

Veronata, Inc.
Attn: Privacy
2261 Market Street STE 22406
San Francisco, CA 94114