Privacy policy

Last updated: October 30, 2026

1. Who we are

Kartzo is a service operated by Maison B And B LLC, based in Las Vegas, Nevada, U.S.A. ("Kartzo", "we", "us"). Kartzo helps online sellers ("sellers" or "brands") give their buyers a page to register products, watch setup videos and share feedback.

This policy covers two groups of people: buyers who scan a Kartzo card, and sellers who have a Kartzo account.

2. If you scanned a card (buyers)

Who is responsible for your information

The card in your package was made by the brand that sold you the product. When you register, you share your details with that brand. Kartzo stores and processes them on the brand's behalf. The brand decides how to use them, under its own privacy notice. For questions about how a brand uses your details, contact the brand directly — or contact us and we'll pass your request on.

What we collect

• What you enter: which product you bought, where you bought it, your email, and — only if you add them — your order number, first name, a 1–5 rating and a comment.
• Your choice about emails: whether you ticked the box to get tips and news from the brand. If you didn't, the brand should use your email only to help you with your product.
• Steps you took: that the card was scanned, and whether you started registering, watched the video and finished. These are counted without your name and help the brand improve its card.

How it's used

To register your product with the brand, show you the setup video and help, and let the brand see your feedback. At the end, every buyer is shown the same optional link to leave a review on the store where they bought, whatever they answered.

3. If you're a seller

• Account details: your name, brand name, email and password. We store passwords only in a scrambled (hashed) form that we can't read.
• Billing: handled by Stripe. We receive your plan, payment status and a Stripe customer number — never your full card number.
• What you add: products (names, ASINs, SKUs), cards, headlines, video links and other settings. If you import an Amazon report, it is read in your browser and we keep only the product names, ASINs and SKUs you choose.
• Messages: anything you send us, such as support emails.

We use this to run your account, bill you, keep Kartzo secure, answer you, and send important service emails (like billing notices or changes to our terms). We don't send sellers marketing emails without permission.

4. Collected automatically

• Technical data: like every website, our hosting provider receives your IP address and browser details when you visit, to deliver pages and block attacks. We keep short-lived server logs to fix problems.
• Cookies: sellers get one cookie that keeps them logged in. We don't use advertising or analytics cookies, and buyer pages set no cookies of our own.
• Outside services on our pages: our fonts load from Google Fonts, and the QR and PDF tools in the dashboard load from Cloudflare's code library (cdnjs), so those services receive your IP address. If a brand adds a setup video, it plays from YouTube (in its privacy-enhanced mode) or Vimeo, under their privacy policies.

5. Who we share information with

We do not sell or rent personal information, and we don't share it for advertising. We share it only:

• With the brand whose card a buyer scanned.
• With service providers who run parts of Kartzo for us, under contracts that limit how they use it: Cloudflare (hosting and database), Stripe (payments), and an email delivery service for password-reset emails.
• When the law requires it, to protect people's safety, or to prevent fraud or abuse.
• If our business changes hands, with the new owner, who must keep protecting it as this policy describes.

Our service providers may store data in the United States and other countries. Where the law requires, we use appropriate safeguards for those transfers.

6. How long we keep it

• Seller accounts and the buyer registrations they hold: while the account is open. When a seller deletes their account, we delete its data within 30 days.
• Brands can ask us to delete buyer registrations, and buyers can ask us directly.
• Billing records: as long as tax and accounting laws require.
• Server logs: a short time, usually a few days.

7. Security

Kartzo uses encrypted connections (HTTPS), hashed passwords, secure login cookies, and access limited to the people who need it. No system is perfectly secure, but we work to protect your information and will tell affected people and authorities about a breach when the law requires.

8. Your choices and rights

• Marketing emails: you can unsubscribe from a brand's emails using the link in them, or ask the brand directly.
• See, correct or delete: anyone can ask for a copy of their information, or ask us to correct or delete it. Email us and we'll respond within 30 days (or pass the request to the brand it belongs to).
• California residents: you have the right to know, delete and correct personal information, and to not be treated differently for using these rights. We do not sell or "share" personal information for cross-context advertising.
• If you're in the EU, UK or a similar place: you may also object to or restrict some uses, and complain to your local data protection authority. For buyers, the brand is generally the "controller" and Kartzo the "processor"; for seller accounts, Kartzo is the controller.

9. Children

Kartzo is not meant for children under 13, and we don't knowingly collect their information. If you think a child has given us their details, contact us and we'll delete them.

10. Changes to this policy

If we change this policy, we'll update the date at the top. For important changes, we'll tell sellers by email or in the dashboard before they take effect.

11. Contact

Maison B And B LLC (Kartzo)
Las Vegas, Nevada, U.S.A.
Email: hello@kartzo.app