Privacy Policy

THEFEWERtabs ("we", "us", "our") operates thefewertabs.com and ships SwitchKit, a service that builds custom ecommerce storefronts and AI SaaS apps for marketplace sellers. This Privacy Policy explains what information we collect when you visit this site, submit an application, book a call, or use a site we build for you, and the choices you have over that data.

This is a plain-language summary. It is not legal advice. If you need a formal or jurisdiction-specific policy — for example to satisfy a specific regulator or before launch — have a lawyer review it.

We only collect what we need to assess a fit, deliver a build, and support you afterward. We never ask for your marketplace passwords — catalog import uses public listings and data exports only.

When you submit an application, request an audit, or book a call, you may share:

• Your name, email address, and WhatsApp number
• Your marketplace store URL and platform (Amazon, eBay, Etsy, TikTok Shop, Walmart, etc.)
• Listing volume, revenue range, product category, and target launch timing
• Whether you already own a domain, and a short note on why you are moving off the marketplace
• Anything you choose to share during a booked call or by email

When you browse thefewertabs.com, we collect limited technical information:

• Basic usage analytics (pages viewed, referral source, approximate region, device type) via Google Analytics 4 — only after you accept analytics in the cookie banner.
• Form submission metadata (timestamp, source page) attached to applications and audit requests.
• Standard server logs (IP address, user agent, request time) retained briefly for security and abuse prevention.

We do not sell your information. We do not use it to train third-party AI models. We do not use it for advertising or cross-site tracking.

• To assess whether a custom build is a fit and prepare a proposal
• To contact you about your application, schedule calls, and send project updates
• To deliver the build, hand off source code, and provide 30 days of post-launch support
• To operate and improve the site and the relevance of our offers
• To respond to your questions and honor your data-rights requests
• To protect against fraud, abuse, and unauthorized access

If you are in the EEA, UK, or Switzerland, we process your personal data on the following lawful bases:

• Consent — for analytics cookies and optional communications, which you can withdraw anytime.
• Contract — to prepare and deliver a build you have applied for or commissioned.
• Legitimate interests — to respond to inquiries, prevent fraud, and keep the service secure.
• Legal obligation — where we are required to retain records (for example, for tax or accounting).

We use a small number of reputable providers to run the service. Each has its own privacy and security practices, and we only share the minimum data needed for them to perform their function:

• MongoDB Atlas — hosted database for applications, audit results, and leads.
• Transactional email (Gmail / SMTP) — to follow up on applications and send project updates.
• Cal.com — scheduling for booked calls; processes the name and email you enter.
• Stripe and PayPal — payment processing on the stores we build for clients. We never see or store your buyers' full card numbers.
• Google Analytics 4 — aggregate analytics, only after you accept analytics cookies.
• Oxylabs — used only for publicly available marketplace listing data during catalog import; no personal data of yours is sent.

Application submissions are stored in a hosted database (MongoDB Atlas) and may be sent by email through a transactional email provider for follow-up. Calendar bookings are processed through our scheduling provider. Each provider has its own privacy and security practices.

Our primary infrastructure is cloud-hosted. Data may be processed in the region of the provider you interact with; see the international transfers section below.

Because our providers are global, your information may be processed outside your home country, including in the United States. We rely on providers that offer appropriate safeguards such as Standard Contractual Clauses where required, and we only transfer the minimum data necessary to deliver the service.

This site uses a single analytics tool — Google Analytics 4 — to understand which content is useful. By default, analytics cookies are blocked until you accept them in the cookie banner that appears on your first visit. Until then, GA4 only receives cookieless, aggregated ping data.

We do not run advertising cookies, cross-site tracking, or remarketing tags. There are no ad_storage, ad_user_data, or ad_personalization consents granted on this site.

• Accept: enables the GA4 measurement cookie for this browser so we can measure usage.
• Reject: keeps analytics cookies blocked; only aggregated, cookieless pings are sent.
• Essential storage only: the consent choice itself is stored in your browser's local storage under the key "tft-consent-v1" so you are not re-prompted.
• Change your mind anytime: clear the "tft-consent-v1" entry in your browser's local storage and reload to be shown the banner again.

Depending on where you live, you may have some or all of the rights below. To exercise any of them, email faizan@thefewertabs.com and we will respond promptly — usually within 30 days.

• Access: request a copy of the personal data we hold about you
• Rectification: ask us to correct inaccurate information
• Erasure: ask us to delete your data (subject to legal record-keeping duties)
• Restriction or objection: limit how we use your data
• Portability: receive your data in a structured, machine-readable format
• Withdraw consent: turn off analytics at any time and opt out of follow-up emails by replying to any message
• California residents (CCPA/CPRA): you may opt out of any "sale" or "share" of personal data — we do not sell or share your data, so no opt-out is needed.

We keep application and lead data for as long as needed to deliver a project and provide support, plus a reasonable period afterward for records and to respond to follow-up. If a project never proceeds, we will delete or anonymize the submission upon request.

Server logs are retained for a short period for security and abuse prevention. Analytics data, when enabled, is retained according to Google Analytics 4's default retention settings. If you ask us to delete your data, we will remove it from active systems promptly and instruct our providers to do the same where feasible.

We use reasonable technical and organizational measures to protect your data, including restricted access, unique credentials, encrypted transit (HTTPS), and separation of secrets from source code. No method of transmission or storage is 100% secure, but we limit access to people who need it and do not share credentials.

If we become aware of a personal data breach that is likely to result in a risk to your rights or freedoms, we will notify affected individuals and the relevant supervisory authority without undue delay, where required by law.

Our services are intended for business owners and adults. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child, contact us and we will delete it.

We may update this policy as the service evolves. The "last updated" date above will always reflect the most recent version. Material changes will be noted on this page; we will not materially reduce your rights without notice where the law requires notice.

Questions, requests, or complaints about your data? Email faizan@thefewertabs.com. If you are in the EU/UK and are not satisfied with our response, you have the right to complain to your local data protection authority.