Privacy Policy

About this policy

This Privacy Policy explains how MyShot collects, uses, discloses, and protects personal information when you visit usemyshot.com, create or use a MyShot account, use the MyShot business-management tools, interact with a website hosted through MyShot, or communicate with us. In this policy, MyShot, we, us, and our refer to John Grant, the individual who operates the MyShot service.

This is a substantive draft based on the current MyShot product. It will remain a draft until help@usemyshot.com is operational and monitored for privacy requests and the publication date is confirmed.

Our role for business customer data

MyShot lets account holders manage projects, products, customers, orders, invoices, websites, and related business records. An account holder may enter personal information about its own customers, contacts, team members, or website visitors. For that information, the account holder generally decides why and how the information is used, and MyShot processes it to provide the service on the account holder's behalf.

If your information was entered into MyShot by a business that uses MyShot, contact that business first about access, correction, deletion, or other requests. We will assist the business as reasonably necessary and as required by law.

Information we collect

Account and identity information

• Your name, email address, and account identifiers.
• A salted, one-way hash of your password when you use password authentication. We do not store your password in readable form.
• Verification, password-reset, email-change, session, and account-security records.
• If you use Google sign-in, the Google issuer and account identifier, email address, email-verification status, and name supplied through the basic openid, email, and profile scopes.
• Information about linked sign-in providers and the dates they were linked or last used.

MyShot uses Google information only to authenticate you, create or locate your MyShot account, and manage the Google identity linked to that account. MyShot does not request access to Gmail, Google Drive, contacts, calendars, or other Google product data. MyShot does not retain Google authorization codes or Google ID, access, or refresh tokens after the sign-in exchange is completed.

Business and workspace information

• Project and team information, invitations, roles, and business profile details.
• Product descriptions, prices, inventory information, customer and contact details, mailing and shipping addresses, orders, purchase-order information, invoices, taxes, fees, shipping information, and workflow history.
• Website pages, styles, media, storefront configuration, and other content you create or upload.
• Uploaded files and images, generated invoices and PDFs, site-build artifacts, and related metadata.
• Communications initiated through the service, such as project invitations, invoice emails, verification messages, password resets, and security notices.

You control the business information you enter. Do not submit highly sensitive or regulated information unless MyShot has expressly agreed in writing to support it.

Hosted-site and cart information

When someone visits a website hosted through MyShot, we may process the requested site and page, an anonymous cart identifier, product identifiers, quantities, and related request information needed to provide the site and cart. A MyShot account holder is responsible for the content of its site and for giving its visitors any additional notices required for that business's own collection and use of information.

Device, usage, and log information

We and our infrastructure providers may automatically receive Internet Protocol address, date and time, requested route, response status, browser or device information, referring page, network and security events, and diagnostic information. We use this information to deliver content, operate the API, detect abuse, troubleshoot errors, and protect the service.

The current MyShot product does not use third-party advertising trackers or cross-site behavioral advertising tools.

Browser storage and cookies

The MyShot Admin application stores an authentication session token and limited account and interface preferences in browser local or session storage. Keep devices with an active MyShot session secure and sign out on shared devices.

During Google sign-in, MyShot uses a short-lived, secure, HTTP-only cookie to complete the same-origin sign-in handoff. It is not used for advertising. Hosted sites may also use a locally generated identifier to maintain an anonymous cart.

Communications and support

If you contact us, we collect the information in your message and any information needed to respond. We also maintain delivery status and operational records for transactional emails sent through MyShot.

How we use information

We use personal information to:

• Create, authenticate, secure, and administer MyShot accounts.
• Provide projects, team collaboration, business records, media storage, invoice generation, website building, hosting, and other requested service features.
• Send verification codes, password resets, security alerts, project invitations, invoices, and service-related notices.
• Remember sessions and user-selected settings.
• Maintain, diagnose, test, and improve the reliability and usability of the service.
• Prevent fraud, abuse, unauthorized access, and violations of our Terms of Service.
• Enforce agreements, resolve disputes, protect users and the public, and comply with legal obligations.
• Create aggregated or de-identified information that does not reasonably identify an individual.

Where applicable law requires a legal basis, we process information as necessary to perform our contract with you, comply with law, protect our legitimate interests in operating and securing the service, protect vital interests, or based on consent. You may withdraw consent where consent is the applicable basis, but withdrawal does not affect earlier lawful processing.

How we disclose information

We may disclose personal information in the following circumstances:

• Service providers. We use infrastructure and operational providers to host the service, store data and files, deliver content, operate databases, send email, monitor systems, and provide authentication. Current providers include Amazon Web Services for hosting, storage, content delivery, logging, secrets management, and transactional email; MongoDB Atlas for application database hosting; and Google when you choose Google sign-in or load a Google Font selected for content.
• Other users at your direction. Project owners and authorized team members can access information within projects according to their permissions. Information may also be included in invoices, invitations, hosted sites, downloads, or messages you direct MyShot to create or send.
• The business that supplied the information. If we process information for a MyShot account holder, we make it available to that account holder and its authorized users.
• Legal and safety reasons. We may disclose information when we reasonably believe disclosure is required by law or legal process, or necessary to protect rights, safety, security, property, users, or the public.
• Business transfers. Information may be transferred as part of a financing, merger, acquisition, reorganization, sale of assets, or similar transaction, subject to appropriate confidentiality protections.
• With your consent. We may disclose information for another purpose when you direct us or give consent.

Google and other providers process information under their own terms and privacy policies when you interact directly with them. For example, loading a Google Font can disclose your IP address and browser request information to Google.

No sale or behavioral advertising sharing

MyShot does not sell personal information for money. MyShot does not share personal information for cross-context behavioral advertising and does not use Google sign-in information for advertising. Because the current service does not sell or share information for those purposes, it does not offer a separate Do Not Sell or Share My Personal Information link.

Data retention and deletion

We retain account and workspace information while an account is active and for as long as reasonably necessary to provide the service, preserve transaction and security history, resolve disputes, enforce agreements, comply with law, and maintain legitimate business records. Retention periods vary based on the type of information and why it is held.

Deleting a project or record in the product may archive or soft-delete it rather than immediately remove every stored copy. Information may remain for a limited period in backups, security logs, email delivery records, generated documents, or records that must be retained for legal, fraud-prevention, accounting, or dispute-resolution purposes. When retention is no longer reasonably necessary, we delete or de-identify the information.

To request account closure or deletion of personal information, contact help@usemyshot.com. We may need to verify your identity and authority. If your information belongs to a business's MyShot workspace, submit the request to that business first.

Security

We use administrative, technical, and organizational measures designed to protect information, including authenticated access, role-based authorization, one-way password hashing, encrypted network transport, cloud secret management, restricted infrastructure permissions, and security logging. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur.

You are responsible for using a strong password, protecting linked sign-in accounts and devices, limiting team access, reviewing invitations, and promptly notifying us if you suspect unauthorized account activity.

International processing

MyShot and its providers may process information in the United States and other countries where they operate. Those countries may have privacy laws different from the laws where you live. Where required, we will use an appropriate legal mechanism for international transfers.

Your choices and privacy rights

Depending on where you live, you may have rights to:

• Know whether we process your personal information and receive information about that processing.
• Access or obtain a copy of personal information about you.
• Correct inaccurate personal information.
• Delete personal information, subject to lawful exceptions.
• Restrict or object to certain processing.
• Receive portable data where required by law.
• Withdraw consent where processing is based on consent.
• Appeal a denied request or complain to a data-protection authority.
• Receive equal service and not be discriminated against for exercising privacy rights.

You can update some account and workspace information in MyShot. For other requests, email help@usemyshot.com with the subject Privacy Request. Describe the right you want to exercise and the account or relationship involved. We may ask for information reasonably necessary to verify identity, authority, and the scope of the request. An authorized agent may submit a request where permitted by law, but we may request proof of authorization and identity.

Rights are not absolute. We may deny or limit a request when permitted by law, including when we cannot verify it, must preserve another person's rights, or must retain information for security, legal, or transaction-integrity reasons.

California privacy notice

This section provides additional information for California residents. Whether the California Consumer Privacy Act applies to MyShot depends on statutory thresholds and circumstances, but we provide the following transparency about the current service.

During the preceding twelve months, MyShot may have collected the following categories of personal information: identifiers; account and authentication information; Internet or electronic network activity; commercial and transaction information entered into business workspaces; professional or business information; user-provided content and communications; and sensitive account credentials used to secure an account.

We collect these categories from you, your device, Google when you choose Google sign-in, MyShot account holders and team members, hosted-site interactions, and service providers. We use and disclose them for the business purposes described in this policy. We disclose these categories to service providers, authorized workspace users, recipients you direct, and legal or transaction counterparties as described above.

MyShot does not knowingly sell or share personal information of consumers under sixteen years old. MyShot does not use or disclose sensitive personal information for purposes that require a right to limit under California law.

California residents may request access, correction, or deletion and may exercise applicable rights without discriminatory treatment by emailing help@usemyshot.com. If MyShot begins selling personal information or sharing it for cross-context behavioral advertising, we will update this policy and provide required opt-out methods before doing so.

Children

MyShot is a business service and is not directed to children under thirteen. We do not knowingly collect personal information directly from children under thirteen. If you believe a child submitted personal information directly to MyShot, contact us so we can investigate and take appropriate action. Account holders must not use MyShot to collect children's information without all notices, permissions, and safeguards required by law.

Third-party services and links

MyShot may link to or interoperate with third-party services. This policy does not govern a third party's independent privacy practices. Review the third party's policy before providing information to it.

Changes to this policy

We may update this policy to reflect changes in the service, law, or our practices. We will post the revised policy with a new version and effective date. If a change materially reduces your rights or materially changes how we use personal information, we will provide additional notice when required by law.

Contact us

For privacy questions or requests, contact:

• John Grant
• 191 Cherokee
• Topanga, CA 90290
• help@usemyshot.com