Privacy Policy

Last updated: [DATE]

[BUSINESS NAME] ("we," "us," or "our") operates SellStackr (the "Service"). This policy explains what information we collect, how we use it, and your rights regarding it.

1. Information We Collect

Account information

When you register, we collect your email address and a securely hashed password. We never store your password in readable form.

Platform connection data

When you connect Etsy or Shopify, we store an encrypted access token that lets us read your order data on your behalf. This token is encrypted at rest, separately from our database, using a key stored outside the database itself.

Order and sales data

We import order totals, shipping costs, fees, tax amounts, order dates, and order status from your connected platforms. We do not collect, store, or process your customers' personal information — no names, email addresses, phone numbers, or shipping addresses. Our access is limited to the aggregate financial data needed to build your report.

Payment information

Subscription payments are processed by Stripe. We do not store your card details on our servers — Stripe handles that directly, under its own privacy policy.

2. How We Use Your Information

We use the information above solely to:

  • Provide the sales reporting service you signed up for
  • Authenticate you and maintain your account
  • Process subscription payments
  • Respond to support requests

We do not sell your data, and we do not use it for advertising or share it with third parties for marketing purposes.

3. Third-Party Services

We share data only with the services required to operate the product:

  • Shopify / Etsy — to fetch your own order data via their APIs, using your authorization
  • Stripe — to process subscription payments

4. Data Retention

We retain your account and order data for as long as your account is active. If you disconnect a platform or delete your account, [RETENTION POLICY — e.g. "order data is deleted within 90 days" — decide and confirm this].

5. Data Security

Platform access tokens are encrypted at rest. All data in transit is protected via HTTPS. Access to your account is protected by your password, which we store as a secure hash, never in plain text.

6. Cookies

We use only strictly necessary cookies — to keep you logged in and to protect against cross-site request forgery. We do not use cookies for advertising, analytics, or tracking, and no consent banner is required for these essential cookies under applicable law.

7. Your Rights

You can export your order data as a CSV at any time from your dashboard. You may disconnect a platform at any time, which stops future data collection from it. To request deletion of your account and associated data, contact us at the address below.

8. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated by email or an in-app notice.

9. Contact

Questions about this policy can be sent to support@example.com.