Privacy Notice
Document version: public-1.0-privacy
This document describes the current public platform terms and privacy notice.
This notice explains the personal and business data used to operate SaaS and provide services to merchants.
Data collected
The platform records verified account and contact details, store configuration, catalog and inventory data, order data, custom-domain and DNS/certificate status, security and audit events, and onboarding information the merchant chooses to provide.
Purpose and access
Data is used to provide, secure, support, improve, and diagnose the platform. Access is limited by tenant, role, and operational need.
Security
The candidate uses encrypted transport, tenant-scoped database controls, restricted administrative capabilities, and redacted operational logs. No security control can eliminate every risk; suspected incidents must follow the documented incident procedure.
Changes and consent
Terms and privacy practices may change as the service evolves. The current document version is shown clearly, and material changes may require renewed acceptance.
Retention
Data is retained as needed for operational, security, contractual, and legal purposes, then exported, anonymized, or deleted under reviewed procedures.
Access, export, correction, and deletion requests
Verified users may submit a scoped data-subject request through the configured support or privacy contact. Requests require identity verification, tenant authorization, legal-hold review, an auditable response, and safe handling of records that must be preserved. This candidate does not promise automatic deletion.
Service providers
The platform may use hosting, cloud, mail, DNS, certificate, and monitoring providers to deliver the service. These providers are managed according to operational and security requirements.
Support and privacy contact
Use the approved support contact for account, privacy, export, correction, or deletion requests.
Contact is not configured yet.
Security contact
Report a suspected security or privacy incident through the configured security contact. Do not include passwords, payment credentials, or invitation tokens.
Contact is not configured yet.
These candidate platform terms do not replace each merchant's own customer-facing cancellation, refund, delivery, or product policies.