Privacy policy

1. Who we are

Madebyu ("we", "us") is a multi-tenant SaaS platform that helps creators publish course and membership websites with streaming, secure member access, tracking, analytics, and growth tools. This policy explains how we handle personal and store data when you use madebyu.dev.

Contact: hello@madebyu.dev

2. Whose data we process

• Platform users (creators) — people who sign up for Madebyu to build and manage projects.
• Shopify merchants — store owners who install or authorize our Shopify app for a Madebyu project.
• Learners / customers — end customers remain Shopify customers. Madebyu does not create a parallel customer login system; access is based on Shopify customer identity and entitlements.

3. Data we collect

From platform users

Account details via Clerk (such as name, email, authentication identifiers), project and website configuration, billing-related records for Madebyu SaaS subscriptions via Stripe, and support messages you send us.

From connected Shopify stores

After you authorize the app, we may access store data needed to operate the product, including shop domain/identity, products and variants (titles, handles, images, prices as provided by Shopify), selected order and customer identifiers required for course access entitlements, and subscription-contract related data when you use subscription offerings. Access tokens are encrypted at rest.

From Vimeo (when connected)

Video metadata and access needed to attach lessons to courses.

Technical data

Standard logs (IP address, browser/user agent, timestamps, error diagnostics) to secure and operate the service.

4. How we use data

• Provide, maintain, and improve Madebyu features
• Sync catalog data and map Shopify products to courses
• Determine learner access based on Shopify purchases/entitlements
• Bill platform users for Madebyu SaaS plans (Stripe)
• Prevent fraud, abuse, and security incidents
• Comply with legal obligations

We do not sell merchant or customer personal data. We do not use Shopify store data to advertise to other merchants' customers.

5. Sharing

We share data with processors that help us run the platform, under appropriate agreements, including:

• Clerk — platform authentication
• Stripe — Madebyu SaaS billing
• Shopify — commerce, checkout, and learner identity
• Vimeo — course video
• Hosting providers (e.g. Vercel, Render) for app and API infrastructure

We may disclose information if required by law or to protect rights and safety.

6. Retention

We keep data while your account is active and as needed to provide the service. After disconnect or account deletion requests, we delete or anonymize personal data within a reasonable period, except where we must retain records for legal, security, or billing reasons. Shopify access tokens are revoked/disconnected when you uninstall or disconnect the integration.

7. Security

We use encryption in transit (HTTPS), encrypt sensitive third-party tokens at rest, restrict internal access, and separate platform secrets from browser-exposed configuration.

8. Your choices

• Update or delete your Madebyu account data via the dashboard or by contacting us
• Disconnect Shopify or Vimeo from a project at any time
• Uninstall the Shopify app from your store admin

Depending on your location, you may have rights to access, correct, delete, or export personal data. Email hello@madebyu.dev to exercise those rights.

9. Children

Madebyu is intended for business use by adults. We do not knowingly collect personal information from children.

10. Changes

We may update this policy. Material changes will be reflected by updating the "Last updated" date on this page.