Privacy Policy

1. Who We Are

SantaBook is operated by SantaBookLLC, located in Christmas, FL 32820, United States. We build business tools for professional Santa portrayers.

For privacy-related questions, contact us at: mark@santabook.app.

2. What We Collect

When you join our waitlist, we collect:

• Email address — required to send you waitlist updates and early access invitations.
• Name — used to personalize communications.
• Phone number — optional; provided at your discretion.
• Referral code — stored in your browser's localStorage (key: santabook_referral_code) to track referrals. This data never leaves your device except as part of your signup submission.

We do not collect payment information, sensitive personal data, or any data beyond what you voluntarily provide.

3. How We Use Your Data

We use the information you provide to:

• Send waitlist confirmation and position updates.
• Notify you when SantaBook launches or early access opens.
• Send product updates, announcements, and relevant communications you opted into.
• Track referral credits as described in our Terms of Service.

We will not sell, rent, or share your personal data with third parties for their marketing purposes.

4. Third-Party Services

Mailgun (Email Delivery)

We use Mailgun (by Sinch) to deliver transactional and marketing emails. When you submit your email address, it is transmitted to Mailgun's servers for processing. Mailgun acts as a data processor on our behalf under a Data Processing Agreement. Mailgun may store your email address on servers in the United States and European Union. See Mailgun's Privacy Policy.

Umami Analytics (Cookieless)

We use Umami, a self-hosted, cookieless analytics platform. Umami does not use cookies, does not track individuals across sessions, and does not share data with any third party. It records aggregate page views and event counts only. No personal data is transferred to any external service. Our Umami instance is hosted at analytics.santabook.app.

Google Fonts

Our site loads fonts (Playfair Display, DM Sans, JetBrains Mono) from Google Fonts. When your browser requests these font files, Google receives your IP address. This is a standard browser request and is governed by Google's Privacy Policy. We do not control this data transfer.

Browser localStorage

We store a referral code in your browser's localStorage under the key santabook_referral_code. This value persists locally on your device and is used only to associate your signup with a referral. You can clear it at any time through your browser settings.

5. Data Retention

We retain your waitlist data for as long as necessary to fulfill the purposes described in this policy — generally until SantaBook launches, you unsubscribe, or you request deletion. Once the product launches, data will be migrated to the SantaBook platform with your consent or deleted upon request.

6. Your Rights

Depending on your location, you may have the following rights:

• GDPR (EU/EEA/UK residents): Right to access, rectify, erase, restrict processing, data portability, and object to processing.
• CCPA (California residents): Right to know what personal information is collected, right to delete, right to opt out of sale (we do not sell data), and right to non-discrimination.

To exercise any of these rights, email us at mark@santabook.app. We will respond within 30 days.

7. Children's Privacy (COPPA)

SantaBook is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at mark@santabook.app and we will delete it promptly.

8. Data Security & Breach Notification

We implement reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS/TLS), access controls, and secure infrastructure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and relevant authorities as required by applicable law, without undue delay and generally within 72 hours of becoming aware of the breach.

9. International Transfers

We are based in the United States. If you are visiting from the EU, EEA, UK, or other regions with laws governing data collection and use, your information will be transferred to the United States, where data protection laws may differ from your jurisdiction. By using this site, you consent to such transfer.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (if you are on our waitlist) or by posting a notice on this page with an updated effective date. Continued use of our site after changes become effective constitutes your acceptance of the revised policy.

11. Contact

For questions, concerns, or requests regarding this Privacy Policy, contact: