ConfitaData we store
We store account, shop, product, image, order, form-response, and uploaded-receipt data. We also store identifiers and encrypted credentials for connected providers, payment references, and technical events needed to update payment status and operate the service.
Facebook and Instagram shop imports
When you choose to build from social content, Confita uses Facebook authorization to read Pages you manage and, when available, a professional Instagram account linked to a selected Page. Confita reads recent Page or Instagram profile and media content only to create the preview you requested. The Meta access token is held only in an encrypted HttpOnly browser cookie for up to 15 minutes, is never stored in Confita's databases, and is deleted after a successful import. Selected images are copied to Cloudflare storage and analysed by Cloudflare Workers AI. An unclaimed preview and its temporary images expire after seven days; claimed images become shop assets while imported products remain inactive until you publish them. To request deletion of imported data, contact hello@confita.app from your account email.
Customers
Customers do not need to create an account. Their order details are shown to the seller to prepare delivery and confirm payments. When they choose card, Stripe or Square receives the data needed to process the payment on its hosted page.
Reviews
When a customer uses a private review link, we store the name they entered, their rating, and their review. This information may appear publicly on the shop until the seller or Confita hides or removes it.
Confita in ChatGPT
When you connect ChatGPT, we share only the data needed for the authorized task. We do not store the complete chat. We store permissions, approvals, files you chose to upload, and a minimized history of completed actions.
Advertising measurement and consent
Confita may send Meta and Google page and conversion events, browser identifiers, ad-click identifiers, device and network information, and hashed account identifiers for attribution, deduplication, and campaign measurement. In the European Union, the European Economic Area, the United Kingdom, Switzerland and Quebec, this happens only after you accept optional cookies. Everywhere else it is on by default, and a Global Privacy Control signal from your browser turns advertising off. You can change your choice at any time from Cookie settings in the site footer.
Providers
We use Supabase for authentication, Cloudflare for hosting, database, files, and abuse protection, Stripe and Square for account connections and card payments, and Google Analytics or Tag Manager for measurement when configured.
Retention
Data is kept while the shop uses Confita or while needed for support, security, backups, or reasonable service obligations.
Privacy rights in Mexico
You may request access, correction, cancellation, or opposition regarding your personal data, revoke consent, or limit its use by emailing support@confita.app. Include enough information to verify your identity and locate the data. We will explain the applicable process and response timing. Material privacy-notice changes will be published on this page.
Control and deletion
You can disconnect ChatGPT immediately. You can also request access, correction, or deletion of your data by writing to support@confita.app. Some records may be retained for security, fraud prevention, backups, or legal obligations.
