1. Overview

This Privacy Policy explains how Mervin collects, uses, and shares information when you use the Service.

2. Information we collect

Account information from Whop sign-in (your Whop user id, name, email, and profile picture).

Business profile you provide (business name, address, tax ID, invoice notes).

Invoice and client data you create (customer names, emails, line items, amounts).

Usage and device information collected automatically to operate and secure the Service.

3. How we use information

To provide the Service: create and send invoices, sync your business details with Whop, and display your data back to you.

To operate, secure, debug, and improve the Service, and to communicate with you about it.

4. Sharing and disclosure

With Whop and, through Whop, the third-party payment processors that process payments and payouts and perform identity verification on your behalf.

With service providers (e.g. hosting, database) that process data for us under contract.

Where required by law, or to protect rights, safety, and the integrity of the Service.

We do not sell your personal information.

5. Whop and payments

Payments are sent and accepted through Whop and processed by third-party payment processors engaged through Whop. Payment, payout, and identity-verification (KYC) data is collected and held by Whop and those processors under their own privacy policies. We do not store full payment credentials or government identity documents.

• Whop Privacy Policy

6. Data retention

We keep your information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements.

7. Security

We use reasonable technical and organisational measures to protect your data. No method of transmission or storage is completely secure.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your data, or object to certain processing. Contact us to exercise them.

9. Cookies and sessions

We use a signed session cookie to keep you logged in and short-lived cookies during sign-in. These are necessary for the Service to function.

10. International transfers

Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for such transfers.

11. Children

The Service is not directed to children under 18, and we do not knowingly collect their data.

12. Changes

We may update this policy; material changes will be notified in the app or by email.

13. Contact

Privacy questions: colin@searchcandy.uk.