Privacy Policy

1. Two kinds of data

Merchant data: information about you and your staff, which we handle to provide the Service to you.

Shopper data: information your customers give your store (names, phone numbers, addresses, orders). We process it on your behalf and on your instructions; your store is responsible for it towards your customers.

2. What we collect

Account details (name, e-mail, phone), store settings and content, billing records, and security information such as sign-in times and the IP addresses of admin actions recorded in your audit log.

For your store: products, orders, customers, messages sent to customers and delivery information, plus first-party storefront analytics (page views and sessions, without third-party tracking unless you add your own pixels).

We do not store card numbers: online payments are handled by the payment gateway you connect.

3. Why we use it

To run, secure and support the Service; to bill you; to send the messages your store asks us to send; to detect fraud and abuse; and to meet legal obligations. We do not sell personal data.

4. Who we share it with

Service providers that host and run the platform (cloud hosting and databases), send e-mail, SMS and WhatsApp messages, and process payments and deliveries you set up. They may only use the data to provide their service to us or to you. The current list, with what each one does and where, is in our Data Processing Terms.

Our database and file storage are hosted in Singapore. Some providers (for example error monitoring and e-mail delivery) process data in other countries; we limit what they receive.

Authorities, where the law requires it.

5. How long we keep it

For as long as your account is active. After a store is cancelled we keep its data for up to 90 days and then delete it, except records we must keep by law (such as invoices). Your customers can ask your store to export or erase their data, and your admin has tools to do both.

Some data is kept for shorter, fixed periods: technical and delivery logs (webhooks, message delivery records, background job records) for 30 days; one-time sign-in codes and links until a day after they expire; contact details on checkouts that were never completed for 90 days; raw storefront analytics for 13 months (daily totals are kept). Security and audit records of admin actions are kept for 2 years.

Encrypted backups of the database are kept outside our main hosting for disaster recovery: daily copies for 35 days and one monthly copy for 12 months. Deleted data disappears from backups as they expire.

6. Cookies

We use cookies needed to sign you in, keep carts and protect forms. Marketing pixels on a storefront are added by the store owner and, where they are, shoppers are asked for consent first.

7. Your choices and contact

You can access and correct your account details in your admin, and ask us for a copy of your data or for its deletion. Write to the privacy address on our Contact page.