Privacy Policy

Effective Date: Jan 29, 2026
Last Updated: Jan 29, 2026

This Privacy Policy explains how Sunny Street Collective, LLC (“Sunny Street,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information through our website https://sunnystreet.com (the “Website”) and mobile/web application https://sunnystreet.app (the “App”). This Policy applies to all users located in the United States, including California residents.

By accessing or using our Website, App, or services, you acknowledge that you have read and understood this Privacy Policy.

We collect personal information directly from you, automatically through your use of the App and Website, and from third parties as described below.

We may collect the following types of personal information when you register for or use our services:

• Identifiers such as your name, email address, mailing address, and phone number.
• Account information, including login credentials, user preferences, and communication history.
• Financial information when you make payments or receive funds through the App, which may include limited payment information processed via Stripe (see §4).
• Communications such as when you contact us by email, submit forms, or respond to surveys.

When you visit the Website or use the App, we automatically collect certain information about your device and usage, including:

• Device Information: IP address, browser type, time zone, operating system, and some cookies installed on your device.
• Usage Information: pages or screens viewed, referring websites or search terms, and interactions with the Website or App.
• Log Files: IP addresses, browser types, Internet service provider, referring/exit pages, and timestamps.
• Cookies, Pixels, and Similar Technologies: See §5 (Cookies & Tracking) for details.

We may receive information from third-party service providers, such as payment processors or analytics platforms, that assist us in providing or improving our services.

We use personal information for the following purposes:

• Account Management: To verify your identity, register and manage your account, and provide you with access to the App.
• Service Delivery: To process transactions, fulfill orders, and provide the services you request.
• Personalization: To customize content and experiences based on your preferences and usage.
• Communications: To send administrative or transactional messages, respond to inquiries, and provide support.
• Marketing: To send newsletters or promotional content (where permitted), and to analyze the effectiveness of marketing campaigns.
• Security and Fraud Prevention: To detect and prevent fraudulent activity and comply with legal obligations.
• Legal Compliance: To comply with applicable laws, regulations, subpoenas, or other legal processes.

We do not sell personal information. We may “share” personal information for targeted advertising as defined under the California Consumer Privacy Act (CCPA), as described in §7.

Because the App provides financial services, we retain personal and transactional records for seven (7) years or as required by applicable financial recordkeeping laws. After this period, information may be deleted or anonymized unless retention is required for legal, regulatory, or security purposes.

We disclose personal information in the following circumstances:

• Service Providers: We share information with vendors that perform services on our behalf, including payment processing (Stripe), analytics (Google Analytics 4), hosting, and customer support. These providers are contractually required to safeguard personal information and use it only for the services provided to us.
• Legal Requirements: We may disclose information to comply with applicable laws, lawful requests, or legal processes (e.g., subpoenas, warrants), or to protect our rights, property, or users.
• Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, personal information may be transferred as part of the transaction.

We do not sell personal information. We do not disclose information to third parties for their independent marketing purposes.

We use cookies, pixels, and similar technologies to improve user experience and analyze usage.

• Essential Cookies: Required for the operation of our App (e.g., authentication).
• Analytics Cookies: Provided by Google Analytics 4 to understand how users interact with our Website and App.
• Functional Cookies: Remember user preferences to enhance usability.

Most browsers allow you to control cookies through their settings. You can disable non-essential cookies, but some features may not function properly.

For more information about cookies, visit http://www.allaboutcookies.org.
You can also opt out of Google Analytics by visiting https://tools.google.com/dlpage/gaoptout.

We do not respond to “Do Not Track” (DNT) signals at this time.

We use administrative, technical, and physical safeguards to protect personal information, including:

• Encryption in transit (SSL/TLS) and at rest.
• Restricted access to personal information to authorized personnel.
• Regular vulnerability scanning and security monitoring.

No system is completely secure. We cannot guarantee the absolute security of your information.

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). These include:

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected, disclosed, or shared.
• Right to Delete: You may request deletion of personal information we hold, subject to legal exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out of Sharing: You may opt out of the “sharing” of personal information for targeted advertising purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise your rights, you may contact us via email at contact@sunnystreet.com. We may require verification of your identity before processing requests.

We collect the following categories of information as defined by CCPA:

• Identifiers (name, email, address, IP address)
• Internet activity (browsing history, device info)
• Financial transaction data (through Stripe)
• Inferences from usage data

We do not sell personal information. We may share identifiers and usage data with analytics providers for targeted advertising.

You can opt out of such sharing by contacting us or adjusting your cookie settings.

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will promptly delete it.

Data Collection and Use for Shopify Integration
What Data We Collect
When you install and use the Sunny Street Shopify app, we collect the following information:

1. Order Information

• Order ID and order total
• Shop domain (your Shopify store URL)

1. Customer Information (with customer consent at checkout)

• Customer email address (provided by Shopify at checkout)
• Sunny Street account email (optionally provided by the customer)

1. Donation Preferences

• Selected donation amount
• Selected charity recipient
• Whether the customer chose to donate to a charity or add credits to their Sunny Street account

Why We Collect This Data
We collect this information to:

• Process charitable donations on behalf of your customers
• Award credits to customers' Sunny Street accounts
• Link donations to the correct Shopify order for record-keeping
• Send donation confirmations and receipts
• Enable customers to track their giving history

How We Use This Data

• Order ID and Shop Domain: Used to associate donations with specific orders and verify the source store
• Customer Email: Used to match donations with existing Sunny Street accounts and send confirmation emails
• Donation Amount and Charity Selection: Used to process the donation and direct funds to the selected charity

Payment Processing

• Customer payment information is not collected by the Sunny Street app
• Donation amounts are charged to the business's stored payment method (configured separately in the Sunny Street Business Portal)
• All payment processing is handled securely through Stripe

Data Storage and Security

• All data is transmitted securely using HTTPS encryption
• Data is stored on secure servers with industry-standard protections
• We do not sell, rent, or share customer data with third parties except as necessary to process donations

Data Retention

• Donation records are retained for accounting and tax purposes
• Customers may request deletion of their data by contacting support@sunnystreet.com

Shopify Permissions
Our app requests the following Shopify permissions:

• read_orders: To display order information in the post-checkout experience
• read_customers: To personalize the donation experience based on customer information
• network_access: To communicate with Sunny Street servers to process donations

In the event of a data breach involving personal information, we will notify affected users via email and a prominent notice on the App or Website within seven (7) business days of discovering the breach, in accordance with applicable law.

We comply with the CAN-SPAM Act. We will:

• Not use false or misleading headers or subject lines.
• Identify messages as advertisements when applicable.
• Include our valid physical address in all commercial emails.
• Provide clear instructions to unsubscribe.
• Honor unsubscribe requests within five (5) business days.

You may opt out of marketing emails by clicking “unsubscribe” at the bottom of our emails or contacting us at contact@sunnystreet.com.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will post the updated version on this page and update the “Last Updated” date. Material changes may be communicated via email or prominent notice.

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:

Sunny Street Collective, LLC
3290 W. Mayflower Ave
Lehi, Utah 84043
United States

Email: contact@sunnystreet.com
Website: https://sunnystreet.com

2026 Sunny Street Collective, LLC. All rights reserved.