Privacy Policy

1. Information We Collect

• Account & Profile: name, email address, phone, business details (e.g., store name, address), roles, and authentication identifiers.
• Order & Operational Data: customer names, contact details, products, quantities, pricing, appointments, notes, and related transactional records you input.
• Device & Usage: IP address, browser/user‑agent, pages viewed, timestamps, referring URLs, and basic diagnostics for security and performance.
• Cookies & Similar: strictly necessary cookies for sign‑in, session security, and user preferences. See “Cookies” below.

2. How We Use Information

• Provide, secure, and maintain the Services (authentication, fraud prevention, auditing).
• Operate core features (orders, inventory, scheduling, reporting) you choose to use.
• Improve reliability, performance, and usability; troubleshoot and support.
• Communicate about updates, security notices, and important service information.
• Comply with legal obligations and enforce our terms.

3. Legal Bases (EEA/UK)

Where applicable, we process data based on: (i) contract necessity, (ii) legitimate interests (e.g., service security, product improvement), and (iii) consent where required (e.g., certain cookies/communications).

4. Sharing & Disclosure

• Service Providers: hosting, databases, analytics, and support vendors who process data under instructions and appropriate safeguards.
• Business Transfers: in connection with a merger, acquisition, or asset sale.
• Legal & Safety: to comply with law, protect rights, security, and users.

We do not sell personal information and do not share it for cross‑context behavioral advertising.

5. Data Retention

We retain information for as long as your account is active or as needed to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion—see “Your Rights.”

6. Security

We use reasonable administrative, technical, and physical measures designed to protect your data. No method of transmission or storage is 100% secure; please protect your credentials and report suspected incidents.

7. Your Rights

Depending on your region, you may have rights to:

• Access, correct, or delete your personal information.
• Port your data and restrict or object to certain processing.
• Withdraw consent where processing is based on consent.

California (CCPA/CPRA): you have rights to know, delete, correct, and opt‑out of certain sharing. We do not sell personal information. To exercise rights, contact us below.

8. Cookies

We use strictly necessary cookies for authentication (e.g., session/JWT), and basic preferences. You can control cookies via your browser, but essential cookies are required for sign‑in.

9. International Transfers

If data is processed outside your region, we implement appropriate safeguards such as standard contractual clauses or equivalent mechanisms where required.

10. Children’s Privacy

The Services are not directed to children under 13 (or the relevant minimum age in your jurisdiction), and we do not knowingly collect personal information from them.

11. Changes to This Policy

We may update this Policy from time to time. The “Last updated” date reflects the most recent changes. If material changes are made, we will provide additional notice as appropriate.