Privacy Policy

Joda Collective is operated by PetalForm LLC, a limited liability company registered in Ohio, United States. PetalForm LLC is the data controller for the information described below. Contact us at hello@jodacollective.com.

When you use Joda Collective, we collect:

• Account information — your name, email address, and password when you register.
• Profile information — city, role (buyer/seller), and any details you add to your profile or storefront.
• Listing content — photos, descriptions, measurements, and pricing that sellers upload.
• Inquiry data — messages, event dates, and measurements that buyers include in inquiries.
• Public service-provider data — provider business and display names, service category, bio, service area and location, starting price and unit, specialties, portfolio/profile photos, and optional contact or response-time details shown on a public provider profile.
• Private service inquiry data — a customer's message and optional event date and city, plus replies in the related service conversation. This is private participant data, not public profile content.
• Order data — purchased item, recipient name, contact information, delivery address, fulfillment updates, Stripe identifiers, payment status, refunds, and disputes.
• Usage data — pages visited, searches made, and features used, to improve the platform.

We use your information to:

• Operate the marketplace — show public listings and service profiles, and deliver product or service inquiries to the relevant seller or provider.
• Personalise your experience — show relevant listings based on your city and preferences.
• Communicate with you — account emails, inquiry notifications, product updates (you can opt out of marketing emails).
• Improve the product — analyse usage patterns to fix bugs and build features.
• Prevent fraud and enforce our Terms of Service.

We do not sell your personal data to third parties. We do not use your data for advertising on external platforms.

We share data only as necessary to run the service:

• Supabase — our database and authentication provider. Your data is stored on their servers.
• Cloudflare — our production web hosting and edge runtime provider.
• Stripe — card and wallet processing, receipts, fraud prevention, disputes, and seller identity, payout, and bank-account setup.
• Other users — public storefronts, listings, and service-provider profiles (including portfolio, service area/location, and starting-price information) are visible to visitors. Product inquiry content is visible to the buyer and seller involved; service inquiry messages and replies are visible only to the customer and provider participants, subject to limited moderation access.
• Order participants — the buyer and seller can see their shared order record. Sellers receive the recipient and delivery details needed to fulfill an order.

Eligible listings may use Buy on Joda. Stripe collects and processes card or wallet details directly for the seller; Joda does not receive or store the full card number. We receive the identifiers and status needed to create the order, confirm payment, show receipts and fulfillment, process seller-requested refunds, and respond to disputes.

Stripe also handles seller identity, bank, and payout information on its hosted pages. Joda stores only the connected-account identifier and readiness status, not bank credentials. Seller subscriptions and promotional placements may also be billed through Stripe or the applicable app store.

We use cookies to keep you logged in and remember your preferences. We do not use third-party tracking cookies. You can clear cookies via your browser settings at any time.

You can:

• Access and update your account information at any time from your dashboard.
• Request deletion of your account from Settings in the app or web dashboard.
• Opt out of marketing emails using the unsubscribe link in any email we send.

If you're in the EU or UK, you have additional rights under GDPR/UK GDPR. Contact us to exercise them.

We retain your account data for as long as your account is active. When you request account deletion, we delete or anonymise your personal data within 30 days, except where required to retain it by law, fraud prevention, or trust and safety obligations.

Joda is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, please contact us.

We'll notify you of significant changes to this policy by email or in-app notice. Continued use after changes means you accept the updated policy.

Questions about your privacy? Email hello@jodacollective.com.