Privacy Policy

Account information. When you create an account with email and password, we collect the full name and email address you provide. This is stored in our database (hosted on Supabase) in a profiles table linked to your account, and you can view or edit it at any time from your Profile page.

Password. If you sign in with email and password, your password is handled entirely by Supabase Auth. We do not store your password in plain text in any database table we control — Supabase stores only a salted hash of it.

Google / Microsoft sign-in. If you choose to sign in with Google or Microsoft, we receive basic profile information from that provider (typically your name and email address) as part of the OAuth sign-in process, consistent with the permissions you grant to that provider at sign-in. We do not receive your Google or Microsoft password.

Session data. To keep you signed in, Supabase Auth sets session cookies in your browser. These cookies are used only to authenticate your requests to the Service and are not used for advertising or cross-site tracking.

Marketplace / connector data. The Connectors page lists marketplaces we intend to support (currently Amazon, Flipkart, Shopify, and WooCommerce). No marketplace integration is live yet, so we do not currently collect, store, or process any order, return, settlement, or other data from any marketplace account on your behalf.

• To create and secure your account, and to authenticate you on sign-in.
• To display your name and account details back to you in the product (for example, the dashboard greeting and your Profile page).
• To send you account-related email, such as an email confirmation link or password-reset link, through Supabase Auth.
• To operate, maintain, and improve the Service.

We do not sell your personal information.

We use the following third-party infrastructure providers to operate the Service. Each processes data on our behalf under its own privacy and security terms:

• Supabase — authentication, session management, and our database (including the profiles table).
• Google and Microsoft — only if you choose to sign in using one of these providers.

We do not share your personal information with any other third party except where required by law, to protect our rights, or with your explicit consent.

We retain your account information for as long as your account is active. If you delete your account or request deletion, we will delete or anonymize your account data, except where retention is required to comply with a legal obligation.

• You can view and update your name from the Profile page at any time.
• You can change your password from Account Settings.
• You can request access to, correction of, or deletion of your personal data by contacting us.
• You can stop using the Service and sign out at any time.

The Service is not directed to children, and we do not knowingly collect personal information from children.

We may update this Privacy Policy as the Service evolves, particularly as marketplace connectors are built and begin processing real data. We will update the “Last updated” date above when we do.

Questions about this Privacy Policy, or requests regarding your personal data, can be sent to [support contact email to be added].