Privacy Policy
AI privacy addendum
Version 2026-09-26. Effective September 26, 2026. This addendum covers the PyroApex Pro assistant when a tenant business uses it.
OpenAI is our subprocessor for generating assistant answers and proposed changes. We send relevant chat context and tenant data, which may include names, business names, email addresses, phone numbers, order data, and product data. We never send dates of birth, identification numbers, or payment data to the assistant provider. Do not include these excluded categories in your messages.
OpenAI does not use our API inputs or outputs to train its models. We do not opt into training. Requests disable response storage; this does not eliminate abuse-monitoring logs. OpenAI normally retains those logs, which may contain prompts and responses, for up to 30 days, with longer retention where required by law or reasonably necessary to protect its services or others from harm. Deleting a PyroApex chat does not immediately delete OpenAI's separate logs. See OpenAI's API data controls.
Our chat retention and deletion
Each member's chats are saved and searchable until that member deletes them by default. Only the member can view their chats; tenant administrators cannot read another member's history. A tenant administrator may instead set automatic deletion after 1 year, 180 days, 90 days, or 30 days. Members may delete one chat or all their chats.
Deleted or expired chats are removed from the database within 30 days, excluding backups. Chats belonging to a member removed from the tenant are deleted after 30 days. Chat content is never sent to application logs or Sentry. Deleting chats does not delete billing usage records, which contain no chat text, or undo confirmed business changes and their audit records. These chat-specific periods take precedence over the general account-data retention periods.
Introduction
Creswood Corners Inc ("we," "us," "our") operates Creswood Corners Wholesale. This Privacy Policy describes how we collect, use, share, and protect personal information when you use our platform. By using Creswood Corners Wholesale, you agree to the collection and use of information in accordance with this policy.
Information We Collect
Information You Provide
- Name, email address, and phone number
- Physical address, billing address, and shipping address
- Date of birth (for age verification)
- Payment information
- Business license and permit numbers (wholesale accounts)
- Government-issued identification (when required for verification)
Information Collected Automatically
- IP address
- Browser type and version
- Operating system and device type
- Pages visited and time spent on site
- Referring URL
- Cookie identifiers
Information from Third Parties
- Payment processor transaction confirmations
- Shipping carrier delivery status
- Authentication provider identity data
How We Use Your Information
- Process orders and payments
- Verify age eligibility (18+ for fireworks purchases)
- Verify shipping destination legality
- Calculate and collect applicable sales tax
- Communicate order status and shipping updates
- Respond to customer service inquiries
- Prevent fraud and unauthorized access
- Comply with legal obligations including DOT hazmat regulations and CPSC requirements
- Improve our platform and user experience
- Send marketing communications (with your consent)
Age Verification
Fireworks are age-restricted products. We collect date of birth to verify that you are at least 18 years of age, as required by applicable state laws. In some cases, we may require government-issued identification for verification purposes.
Age verification data is retained only as long as necessary for legal compliance.
Fireworks Compliance Records
To comply with federal and state regulations governing fireworks sales, we retain records of purchases including product types, quantities, and shipping destinations for 7 years. These records may be disclosed in response to lawful requests from regulatory authorities.
Cookies and Tracking
We use strictly necessary cookies (session, cart, age gate, CSRF, and consent) and analytics cookies (Google Analytics) to operate and improve our platform. For complete details about the cookies we use and how to manage them, please see our Cookie Policy.
How We Share Your Information
| Recipient | Data Shared | Purpose |
|---|---|---|
| OpenAI (AI assistant subprocessor) | Names, business names, email addresses, phone numbers, order and product data, and chat context. Never dates of birth, identification numbers, or payment data. | Generate assistant answers and proposed changes when the business uses the assistant. See the AI privacy addendum. |
| Payment Processors | Name, billing address, transaction amount | Process payments |
| Shipping Carriers | Name, shipping address, phone, order contents | Fulfill delivery |
| Email Service Providers | Email, name | Transactional and marketing emails |
| Analytics Providers | IP address, device info, browsing behavior | Site analytics |
| Tax Compliance Services | Name, address, order info | Sales tax calculation |
| Cloud Infrastructure | All hosted data | Storage and processing |
| Law Enforcement | As required | Legal obligation, subpoena, or court order |
We do not sell your personal information.
Data Retention
| Data Type | Retention Period |
|---|---|
| Financial and transaction records | 7 years |
| Order records | 7 years |
| Active account data | Duration of account |
| Age verification records | 3 years |
| Marketing consent records | Until opt-out + 3 years |
| Website analytics and server logs | 6 months |
| Customer service communications | 5 years |
| Deleted account data | Removed within 90 days of request |
Data Security
We implement industry-standard security measures to protect your personal information, including SSL/TLS encryption for data in transit, secure payment processing through PCI DSS-compliant providers (we do not store full credit card numbers or CVV codes), access controls, and regular security assessments. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.
Your Rights and Choices
You have the right to:
- Access your personal information
- Correct inaccurate information
- Request deletion of your information
- Opt out of marketing communications
- Disable cookies through your browser settings
California Privacy Rights (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act and California Privacy Rights Act:
- Right to know what personal information we collect and why
- Right to delete your personal information
- Right to correct inaccurate personal information
- Right to opt out of the sale or sharing of personal information (we do not sell personal information)
- Right to non-discrimination for exercising your privacy rights
Children's Privacy
Our platform is intended solely for adults 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we discover that we have collected information from a minor, we will delete it promptly.
Marketing Communications
We may send marketing emails about products, promotions, and other updates. You can opt out at any time by using the unsubscribe link included in each marketing email. Opting out of marketing communications does not affect transactional communications such as order confirmations and shipping notifications.
Multi-Tenant Platform
Creswood Corners Wholesale operates on a platform where independent fireworks businesses ("Merchants") operate storefronts. Each Merchant is an independent data controller for their customers' information. Customer data is logically isolated between Merchants.
Third-Party Links
Our platform may contain links to third-party websites. We are not responsible for the privacy practices or content of those websites. We encourage you to review the privacy policies of any third-party sites you visit.
Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.
Contact Us
If you have questions about this Privacy Policy, please contact us:
Creswood Corners Inc
25580 County Highway S, Cadott, WI 54727