Privacy policy
Last updated: November 2026. This template must be reviewed by legal counsel for your jurisdiction before launch.
Who we are
COMET STORES is operated by Comet. For merchant account data we are the controller. For data that merchants collect from their customers through their storefronts, the merchant is the controller and COMET processes it on the merchant's behalf.
What we collect
- Merchant accounts: name, email, password hash, store details, team membership, subscription and billing status, support conversations.
- Customer orders: name, phone number, optional email, delivery address, items ordered and instructions, provided to the merchant to fulfil the order.
- Storefront analytics: page and product views counted with a pseudonymous identifier derived from a daily-rotating keyed hash of the IP address and browser. We do not store IP addresses for analytics, set analytics cookies or track visitors across days or stores.
- Abandoned checkouts: cart contents and value only. Personal details are only stored when an order is actually submitted.
How we use data
- To provide and secure the service, prevent fraud and abuse, and enforce our terms.
- To send transactional messages (order notifications, password resets, subscription notices).
- To process subscription payments through our billing provider. We do not receive or store full card numbers.
Payments
COMET does not process customer payments for merchants. When a customer pays a merchant via a third-party link (for example PayPal or Stripe), that provider's privacy policy applies.
Sharing
We share data only with infrastructure providers (hosting, database, file storage, email delivery, subscription billing) under contract, or when required by law. We never sell personal data. Customer contact details are never shown publicly.
Security
Store data is isolated per merchant at the database level, passwords are hashed with scrypt, sessions use secure HTTP-only cookies, and order tracking uses unguessable private links.
Retention and your rights
Merchants can export their data and delete their account from Account settings; deletion removes the account and owned stores. Customers who want to access or delete order data should contact the merchant they ordered from, or contact us if they cannot reach the merchant.
Contact
Privacy questions: contact us through the contact page.