Privacy Policy
Last updated: September 5, 2026
1. Who we are
RootPurr is a US-based plant-based cat-litter brand. This policy explains what data the website at https://rootpurr.com (“the Site”) collects, why, and what your rights are.
2. What we collect
- Retail purchases: name, shipping address, email, and payment data, collected and tokenized by Stripe. We never see or store your full card number.
- B2B inquiries: the name, business email, company, country, and message you submit through the wholesale or private-label inquiry form.
- Newsletter: the email address you submit via the footer subscribe form.
- Analytics: standard server logs (IP, user-agent, referrer, timestamp) for security and performance. We do not use third-party advertising trackers.
3. Why we collect it
- To fulfill orders and ship product to your address.
- To respond to wholesale and OEM inquiries.
- To send order receipts and shipment tracking.
- To send newsletter content if you opt in.
- To detect fraud and abuse.
4. Who we share it with
We share data only with vendors needed to run the business:
- Stripe · payment processing
- Fulfillment providers and carriers · only when retail orders begin shipping
- Law enforcement · only if compelled by valid US legal process.
We do not sell your data. We do not share it for advertising.
5. Sub-processors
A sub-processor is a third-party service that processes personal data on our behalf to operate the Site or fulfill orders. We list our current sub-processors below. If we add or change a sub-processor in a way that materially affects how your data is handled, we will update this page and (where required) notify you.
| Processor | Purpose | Data shared | Jurisdiction | Policy |
|---|---|---|---|---|
| Stripe, Inc. | Payment processing (one-time checkout) | Name, email, billing address, payment card (tokenized — we never see it), order total | United States (Delaware) | stripe.com/privacy |
| Resend (Plus Five Five, Inc.) | Transactional and marketing email delivery, newsletter audience | Email address, first name (optional), interaction events | United States (Delaware) | resend.com/legal/privacy-policy |
| Upstash | Secure business database and administrator sessions | Order details, inquiry submissions, newsletter signups, fulfillment status, and expiring administrator sessions | Configured database region / Upstash infrastructure | upstash.com/privacy |
| Fulfillment providers | Order fulfillment, if and when retail orders begin | Name, shipping address, and order contents, if needed | United States | Shared only for order fulfillment |
| Vercel Inc. | Website hosting, edge functions, Web Analytics, Speed Insights | IP address (anonymized for analytics), browser metadata, page paths | United States (Delaware) | vercel.com/legal/privacy-policy |
6. Your rights
You can request access, correction, or deletion of your personal data at any time by emailing hello@rootpurr.com. California residents have additional rights under the CCPA / CPRA — see our Do Not Sell or Share notice for the full statement and how to file a request. EU / UK residents have rights under GDPR. We honor those requests regardless of jurisdiction.
7. Cookies
The Site uses functional cookies only (cart persistence, session integrity). No third-party advertising or tracking cookies are set. You can clear cookies from your browser at any time without breaking site functionality.
8. Updates
If we materially change how we handle data, we'll update this page and adjust the “last updated” date at the top. For substantive changes affecting subscribers we'll send notice by email.
9. Contact
Questions, requests, or concerns: hello@rootpurr.com. We respond within 1 business day, M–F.