Privacy Policy

We use the information above only to:

• Process, verify, and ship your order, and let you track it.
• Send you order status emails (confirmation, payment verified/rejected, shipped) and, if you're a referrer, payout confirmations.
• Answer questions and provide support via Messenger.
• Calculate and pay out referral rewards.
• Detect and prevent payment fraud (e.g. flagging a duplicate or mismatched payment screenshot for our team to review).
• Understand overall site usage so we can improve the store.

We never sell your information, and we never use it for third-party advertising.

Order, referral, and product data is stored in a Postgres database hosted by Supabase. Payment-proof screenshots and referral GCash QR codes are stored in private Supabase Storage buckets that are never publicly accessible — only our store's backend can read them, gated behind the same verification used to view an order.

We rely on the following third-party services to run the store. We share only what each one needs to do its job:

• Supabase — our database and private file storage (described above).
• Vercel — hosts this website, and provides the anonymized analytics described above.
• Resend — delivers our transactional emails (order confirmation, payment status, shipping, referral payouts). It processes your email address and the email content only to send that message.
• Google Gemini — when enabled, automatically checks an uploaded payment screenshot (amount, recipient name, whether it looks like a genuine payment confirmation) to flag possible issues for our team. This check is advisory only — a real person always makes the final call on your payment, and Gemini never sees your name, address, or order contents, only the screenshot image itself.
• Meta / Facebook Messenger — the platform your messages travel through when you contact us on Messenger, subject to Meta's own Privacy Policy.
• Telegram — we use a private Telegram notification for our own team to be alerted the moment a new order comes in (order number, items, and total). This is an internal tool, not a public channel.
• J&T Express — our shipping courier for regular (non-Same-Day) deliveries. We share only your delivery name, address, and mobile number, and only for orders using that shipping method.

We keep order and referral records for as long as needed for order history, accounting, dispute resolution, and to calculate referral payouts. Our Messenger automation platform keeps conversation processing logs for a limited period (currently up to 7 days) for troubleshooting, then they age out automatically. You can request deletion of your personal information at any time — see below.

You can ask us what information we hold about you, ask us to correct it, or ask us to delete it. See our Data Deletion Instructions for exactly how to do that. We'll always confirm your identity (e.g. via the mobile number or order number on file) before acting on a request, to make sure we're not making changes for the wrong person.

Idol Fairies Beauty is not directed at children, and we do not knowingly collect information from children.

If we change how we collect or use your information in a meaningful way, we'll update this page and change the "Last updated" date above.

Questions about this policy, or about your information? Reach us any time:

• Message us on Facebook Messenger
• Email: idolfairiesphilippines@gmail.com