Privacy policy

LAST UPDATED 30 SEPTEMBER 2026

Iro Kama is run by CHENGTANG, Inc. (“we”). This policy explains what we collect when you shop with us, why, and who we share it with. We don't sell your personal information.

What we collect

• Account details: your email address, and your name if you sign in with Google. If you set a password, it is stored only as a one-way hash by our authentication provider.
• Orders: what you bought, prices, order status, and the shipping name, address and email you enter at checkout.
• Payments: handled entirely by Stripe. Your card details go to Stripe, not to us; we receive only a payment confirmation.
• Your bag: a cookie remembers what's in your bag, and sign-in cookies keep you signed in. We don't use advertising or analytics cookies.

How we use it

• To process, ship and support your orders, and to let you see them under Your orders.
• To send emails you need, such as sign-in links, account confirmation and password resets.
• To prevent fraud and keep the store secure.

Who we share it with

Only the services we need to run the store, and only for that purpose:

• Stripe, to take payments.
• Supabase, which hosts our database and handles sign-in.
• Google, if you choose to sign in with Google.
• Shippo and the shipping carrier, who receive your shipping address to deliver your order.
• Google Cloud, which hosts the website and its servers.

We may also disclose information when required by law.

How long we keep it

We keep order records for as long as we need them for accounting, tax and legal obligations. You can ask us to delete your account at any time; we'll remove what we aren't required to keep.

Your choices

You can ask to see, correct or delete your personal information by emailing us. You can sign out at any time from Your orders.

Contact

Questions about this policy: chengtang.nyc@gmail.com. If we change it, we'll update the date above.