Privacy Policy

Last updated: August 30, 2026

Rakuneto operates the Rakuneto service at rakuneto.com. This policy explains how we handle personal information when you visit the site, create or use a Rakuneto account, or contact us.

Information we collect

• Account and identity information: your display name, verified email address, account-provider identifier, language and time-zone preferences, and account-access information.
• Studio information and content: studio name, membership and invitation information, and the pottery, production, firing, market, inventory, reference, and other records you enter. This can include notes, dates, venue information, commercial figures, photographs, documents, file names, captions, and metadata.
• Service and security information: IP address, browser and device information, essential authentication/session cookies, and privacy-bounded audit, operational, and rate-limit records used to secure and operate the service.
• Communications: the email address, language, studio name, and invitation or deletion details needed to send service emails.

Please do not upload information that you are not authorized to share. Rakuneto is not designed to receive payment-card numbers, government identification numbers, or health records.

Why we use information

We use personal information to authenticate users; provide private studio workspaces; make content available to the studio members you authorize; send invitations and important account or deletion notices; create requested exports; prevent abuse and protect the service; troubleshoot and improve reliability; and comply with law. We do not use studio content for advertising, sell personal information, or disclose it to third parties for their own marketing.

Service providers and disclosures

We use providers that process personal information only to provide the service or meet legal obligations. The current categories are:

• Clerk: authentication and account management, including sign-in with a connected identity provider such as Google when you choose that option;
• Neon: application database hosting;
• Cloudflare R2: private storage for uploaded photos and documents;
• Vercel: application hosting and privacy-bounded operational logs; and
• Resend: transactional email delivery for invitations and studio-deletion notices.

We may also disclose information where required by law or necessary to protect the rights, safety, and security of Rakuneto, its users, or the public. If Rakuneto is reorganized or transferred, information may be transferred as part of that transaction, subject to applicable law.

These providers may process information outside your province or Canada. You may contact us for information about the safeguards used for a particular communication of your personal information outside Québec.

Cookies

Rakuneto currently uses essential cookies and similar storage needed for authentication, session security, invitation review, language preferences, and fraud prevention. We do not currently use advertising or analytics cookies, and we do not provide a cookie-preference banner. If we add non-essential cookies or tracking technologies, we will update this policy and provide any consent choice required by law before using them.

Retention and deletion

• We keep account and active studio information while it is needed to provide the service.
• Items moved to Rakuneto's Trash are retained for 30 days before scheduled permanent deletion.
• When an owner schedules deletion of a studio, the studio becomes read-only and is scheduled for permanent deletion after 30 days. Associated studio records and private stored files are deleted as part of that process, subject to limited information we must keep for legal, security, or dispute-resolution purposes.
• Invitations and short-lived access credentials expire automatically. Audit, security, and operational records are retained only as long as reasonably necessary for their purpose or as required by law.
• Exports are generated for download to your device. You are responsible for the copy you download and for protecting or deleting it.

Security

We use reasonable administrative, technical, and organizational measures designed to protect personal information, including access controls, encrypted transport, private object storage, and server-side authorization checks. No online service can guarantee absolute security.

Your privacy rights and requests

You may request access to, correction of, or information about the use and disclosure of your personal information by contacting us. You may also withdraw consent where consent is the basis for processing, subject to legal or contractual limits. We may need to verify your identity before acting on a request. Under PIPEDA, we normally respond within 30 days; if a permitted extension applies, we will notify you as required.

Québec residents may also have rights under Québec privacy law, including access, rectification, and portability where applicable. You may make a complaint to the Office of the Privacy Commissioner of Canada or the Commission d'accès à l'information du Québec if you are dissatisfied with our response.

Changes

We will update this policy when our data practices or legal obligations change. For material changes, we will post the new version with a revised date and, where required, provide additional notice or obtain consent before the new practice begins.

Contact and privacy officer

Legal operator and mailing address: Jean-Dominic Laroche - 77 rue Dugas, Québec, Québec, Canada, G1E 5H8

Person responsible for the protection of personal information / Privacy Officer: Jean-Dominic Laroche
Email: privacy@rakuneto.com