Privacy and data handling for the Smith's MVP.

This public summary will be finalized before credential-connected launch.

Data boundaries

What ClipCart Grocery expects to handle.

Email address, account profile, subscription status, and support requests.
Smith's account access only after explicit consent and only after security controls are implemented.
Database rows should store secret references or encrypted envelope IDs, not plaintext Smith's passwords or raw cookies.
Coupon run history, clipped coupon metadata, estimated coupon value, and action-needed states.
Retention, revocation, and deletion workflows must be available before public credential collection.

Customers may request cancellation or deletion support. Sensitive diagnostics must stay outside the repo and must not expose credentials or private account data.