How we handle your data.
This page is maintained by Pragmacarter Canada Inc. to answer common security and privacy questions about how we operate. It reflects our current practices and is not an independent certification.
Authentication & access
Access to internal tools is restricted to authorized Pragmacarter staff using individual accounts and modern password requirements. Customer accounts, when used, rely on managed authentication with hashed credentials — we never store plaintext passwords.
Hosting & platform
The Pragmacarter website is hosted on Lovable's managed cloud platform, which provides TLS encryption in transit and managed database storage with row-level access controls. This page describes the controls enabled in our app today; it is not a Lovable-issued certification.
Payments
Card payments are processed by Stripe. Pragmacarter never sees or stores full card numbers, CVCs, or banking credentials. Stripe is a PCI-DSS Level 1 certified processor; refer to stripe.com/privacy for their data handling.
Data we collect
We collect the information you provide to scope a project (contact details, product specs, sales channels, shipping addresses) and basic analytics about site usage. We use this data only to deliver and improve our sourcing services and to communicate with you about your project.
Subprocessors
We share data only with vendors necessary to operate the service: Lovable (hosting), Stripe (payments), and email/communication tools used by our team. We do not sell customer data. A current list is available on request.
Requests & contact
To request access to, correction of, or deletion of your personal data — or to report a security concern — email pragmacarter@gmail.com. We aim to respond within 5 business days.