Privacy Policy.

The short version

We collect the minimum we need to run Slow Mondays. We don’t sell your data. We don’t send marketing emails you didn’t sign up for. You can email us to see what we have on file or ask us to delete it.

1. What we collect

When you sign up, we collect your email, your café’s name, city, brand voice notes, and anything else you share during onboarding or in your portal — menu items, photos, opening hours, phone, address, Instagram handle. We also generate weekly content packages for your business, which we store alongside your café record.

Payments are handled by Stripe. We don’t store your credit card number — only the customer and subscription identifiers Stripe returns.

Some basic technical data is collected automatically (IP, user-agent, referrer) for operating and securing the service.

2. How we use it

We use your information to produce and deliver your weekly packages, to send service emails (welcome, weekly delivery, sign-in links, revision requests), to bill you, and to keep the service secure and running. We also use aggregate, non-identifying usage information to understand what’s working.

3. Service providers we share with

We rely on a small set of vendors to run the service:

• Supabase — database, authentication, and file storage.
• Stripe — subscription billing and payment processing.
• Resend — transactional email delivery.
• OpenAI — AI text and image generation for weekly packages. Prompt content derived from your brand information is sent to OpenAI’s API for processing.
• Vercel — hosting and edge network.

Each of these processes data on our behalf under their own privacy commitments.

4. Cookies + tracking

We use a small number of functional cookies — primarily the auth-session cookie from Supabase — to keep you signed in and secure.

We also load the Meta Pixel — Facebook/Meta’s ad measurement tool — so we can see which ads drive signups and show relevant ads to people who’ve visited. The Pixel sets cookies that Meta uses for attribution and audience building. If you’d rather not be tracked, you can opt out in your Meta ad preferences or use a tracking blocker — the site works either way.

5. How long we keep it

We keep account and content data for as long as your subscription is active and for a reasonable period afterward so we can help with questions, reinstate a cancelled account, or meet tax/accounting obligations. You can ask us to delete your data sooner by emailing us; some records (e.g. invoices) may be retained where required by law.

6. Your rights

You can access, correct, export, or delete your data at any time by emailing us. If you’re in a jurisdiction with specific data-protection rights (e.g. under PIPEDA, GDPR, or similar), those rights apply and we’ll honour them.

7. Where we run

We’re based in Vancouver, Canada. Our vendors may process data in other regions (primarily North America and the EU). By using the service, you understand that your data may be transferred and processed in those regions under their respective legal frameworks.

8. Changes

We’ll update the “Last updated” date above and flag any material change by email.

9. Contact

Privacy questions, requests, or concerns: email hello@slowmondays.ca.