Privacy Policy

This Privacy Policy is provided for informational purposes and does not constitute legal advice. We recommend consulting a qualified attorney for legal guidance specific to your situation.

1. Introduction

Dead Life Inc (“we,” “us,” or “our”) operates a multi-tenant band merchandise platform located at deadlifeinc.com (the “Platform”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Platform, create an account, make a purchase, or interact with our services.

By using the Platform, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Platform.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, display name, phone number, and password when you create an account.
• Profile Information: Avatar, bio, location, website, and genre preferences you add to your member profile.
• Order Information: Shipping and billing addresses, phone number, and any order notes you provide at checkout.
• Payment Information: Payment details are processed by our third-party payment processors. We do not store full credit card numbers on our servers.
• Communication Data: Messages, support requests, or feedback you send to us via email.
• Newsletter Subscription: Your email address when you sign up for our newsletter.
• Band Information: If you register as a band admin or band member, we collect band name, description, genre, social media links, and related content you submit.

2.2 Information Collected Automatically

• Device and Browser Data: IP address, browser type, operating system, device type, and screen resolution.
• Usage Data: Pages visited, time spent on pages, click patterns, referring URLs, and navigation paths through the Platform.
• Location Data: Approximate geographic location based on your IP address, used for shipping rate estimation and tax calculation.
• Shopping Activity: Items added to your cart, products viewed, and purchase history.

2.3 Cookies and Similar Technologies

• Session Cookie: An HTTP-only, secure cookie (SameSite: Strict) that stores your authentication session. This cookie is essential for keeping you logged in and expires after 1 hour. It is automatically refreshed while you remain active.
• Shopping Cart Data: Your cart contents are stored in our database and associated with your session or account.
• Analytics Cookies: Google Analytics and Firebase Analytics use cookies to collect aggregated usage data to help us understand how visitors interact with the Platform.
• Local Storage: We use browser local storage to persist UI preferences such as theme selection and location data for shipping estimates.

3. How We Use Your Information

We use the information we collect to:

• Process and fulfill your merchandise orders.
• Create and manage your account, including role-based access (member, band member, band admin).
• Calculate shipping rates and taxes based on your location.
• Send transactional emails including order confirmations, shipping updates, and delivery notifications.
• Send marketing communications, newsletters, and promotional offers (only with your consent; you can opt out at any time).
• Send abandoned cart reminders if you have items in your cart and have opted into such notifications.
• Administer our loyalty rewards program, including tracking points, tiers, and discount codes.
• Manage band invitations, memberships, and multi-tenant band operations.
• Analyze Platform usage to improve features, performance, and user experience.
• Detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity.
• Comply with legal obligations and enforce our terms.

4. How We Share Your Information

We do not sell your personal information. We share information only in the following circumstances:

4.1 Third-Party Service Providers

• Firebase (Google Cloud): Authentication, data storage, file storage, and cloud functions.
• Printify and Printful: Print-on-demand fulfillment partners who produce and ship your merchandise. When you place an order, we share your shipping address and order details with the applicable fulfillment partner.
• Payment Processors: Payment information is handled by our payment processing partners. We do not store full payment card details.
• Google Analytics / Firebase Analytics: Aggregated usage analytics to understand Platform performance and visitor behavior.
• Email Service Providers: For sending transactional and marketing emails.

4.2 Band Partners

When you purchase band merchandise, the relevant band may receive order information (items purchased, order total, general location) for fulfillment and analytics purposes. Bands do not receive your payment details.

4.3 Legal Requirements

We may disclose your information if required to do so by law, in response to a valid legal process (subpoena, court order, or government request), or to protect the rights, property, or safety of Dead Life Inc, our users, or the public.

4.4 Business Transfers

If Dead Life Inc is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

• Account Data: Retained until you delete your account.
• Order Records: Retained for a minimum of 7 years for tax, legal, and accounting purposes.
• Analytics Data: Aggregated analytics are retained indefinitely. Individual session data is retained per Google Analytics' standard retention policies.
• Shopping Cart Data: Abandoned carts expire and are automatically cleaned up after a defined inactivity period.
• Marketing Preferences: Retained until you unsubscribe or delete your account.

6. Data Security

We implement reasonable security measures to protect your personal information, including:

• HTTPS/TLS encryption for all data in transit between your browser and our servers.
• HTTP-only, Secure, SameSite: Strict session cookies to prevent cross-site attacks.
• CSRF (Cross-Site Request Forgery) protection on all mutation API endpoints.
• Rate limiting on authentication and sensitive endpoints to prevent brute-force attacks.
• Role-based access controls enforced at both the application and database levels.
• Security headers including Content-Security-Policy, Strict-Transport-Security, X-Frame-Options, and X-Content-Type-Options.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

7.1 Account and Profile

You can access, update, or correct your account information at any time by logging into your account and visiting your profile settings.

7.2 Email Preferences

You can manage your email notification preferences through your account settings. You can also unsubscribe from marketing emails at any time by clicking the “unsubscribe” link in any email. Transactional emails related to your orders cannot be opted out of.

7.3 Account Deletion

You may request deletion of your account and associated personal data by contacting us at deadlifeinc@gmail.com. We will process your request within 30 days. Certain information (such as order history) may be retained as required by law.

7.4 Cookies

You can control cookies through your browser settings. Disabling cookies may affect Platform functionality, including the ability to stay logged in and maintain your shopping cart.

8. California Privacy Rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:

• Right to Know: You have the right to request that we disclose what personal information we have collected about you, the categories of sources, the business purpose for collection, and the categories of third parties with whom we share it.
• Right to Delete: You have the right to request deletion of personal information we have collected from you, subject to certain exceptions (e.g., completing a transaction, legal obligations).
• Right to Correct: You have the right to request that we correct inaccurate personal information.
• Right to Opt-Out of Sale: We do not sell your personal information. If this changes, we will provide a “Do Not Sell My Personal Information” link.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise these rights, contact us at deadlifeinc@gmail.com with the subject line “CCPA Request.” We will verify your identity and respond within 45 days.

9. Children's Privacy (COPPA)

The Platform is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child under 13, please contact us at deadlifeinc@gmail.com.

10. Third-Party Links

The Platform may contain links to third-party websites, including band social media pages, Spotify, YouTube, and other external services. We are not responsible for the privacy practices of these third-party sites. We encourage you to review the privacy policies of any third-party website you visit.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last Updated” date at the top of this page. For material changes, we may also notify you via email or a prominent notice on the Platform. Your continued use of the Platform after changes are posted constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at: