Privacy Policy

1. Controller

[Legal entity name], [Registered business address]. Contact for privacy questions: [contact email address]. [Data protection officer, if appointed.]

2. Data we process

• Account data: name, email address, password (stored hashed by our authentication provider), company name.
• Onboarding answers you choose to give (business type, store size, sales channels, challenges).
• Business data you enter: products, stock, orders, customer names and emails of your own customers, suppliers.
• Subscription and billing status. Card details are handled by our payment provider and never stored by us.
• Support and feedback messages.

3. Purposes and legal bases

• Providing the service and your account (contract, Art. 6(1)(b) GDPR).
• Billing and accounting obligations (legal obligation, Art. 6(1)(c)).
• Security and abuse prevention (legitimate interest, Art. 6(1)(f)).

4. Your customers’ data

When you store data about your own customers, you are the controller and we act as your processor. [Attach or link a Data Processing Agreement.]

5. Processors and transfers

[List hosting, database, authentication, email and payment providers, their locations and the safeguards used for any transfer outside the EEA.]

6. Retention

[State retention periods for account data, business data after cancellation, and billing records.]

7. Your rights

You have the right to access, rectify, erase, restrict, port and object to processing of your data, and to complain to a supervisory authority. Contact [contact email address].

8. Cookies

See our Cookie Policy.