Privacy Policy

Staging notice · Updated October 19, 2026
Operator: Xerxes Enterprises LLC.

This staging website

Cloudflare serves this website and may process request metadata such as IP address, device/browser information and security logs to deliver and protect the service. This package installs no analytics, advertising pixels or marketing cookies.

The label workspace uses browser storage for local settings, projects and session information. Local product data is processed in your browser. This connected staging workspace sends authentication requests, entitlement checks and project data to the existing Supabase project. New account signup, project overwrites and production billing are blocked. Email-code login requests send transactional authentication email.

Connected service at launch

Supabase provides email-based authentication, account records, saved projects and backend services. Square processes subscriptions and payments. Transactional emails may be delivered through Resend. Account data can include email, identifiers, access/trial dates, subscription and payment references, refund records and projects you choose to save.

Full card numbers and security codes are intended to be handled by Square's payment form rather than stored in the SKUMerch database. Production payment processing is disabled in this staging build. The separate restricted Sandbox page uses Square Sandbox test cards and an isolated test fixture. Test subscriptions do not change production accounts, and refund notifications in that fixture are simulated.

Support and retention

Emailing support shares your email address and message with our Gmail support mailbox. We use support information to respond, investigate issues and meet applicable obligations. Connected account and transaction data may be retained as needed to operate the service, prevent abuse and meet applicable legal obligations. Exact production retention settings remain subject to verification.

Your choices

You can clear browser storage using your browser settings; this can remove local projects and settings. Export backups before clearing data. To request access, correction or deletion of account information, email leo.xerxes.avila@gmail.com. Identity verification may be required and some records may need to be retained.

Links to the separate Sigil site are governed by that site's own privacy notice. Review this policy again when the production service launches.