1 Information We Collect

• Account details such as name, email, company, phone number, workspace details, billing status, and login activity.
• Commerce records connected by a customer, including products, orders, customer profiles, shop metadata, and integration status.
• Conversation data from website chat, social channels, support workflows, AI replies, human handoffs, and related customer context.
• Technical information such as browser, device, IP address, security logs, timestamps, cookies, and usage patterns.
• Payment and billing information processed through our third-party payment providers.

2 How We Use Your Information

• Provide, operate, and improve the Ecomas SaaS platform, including AI chat, inbox, integrations, support workflows, and account features.
• Authenticate users, secure accounts, prevent abuse, troubleshoot errors, and respond to support requests.
• Generate AI-assisted responses based on connected store data, support policies, and conversation context selected by the customer.
• Send important service notices, billing notices, onboarding guidance, and product updates where permitted.
• Analyze aggregated usage trends to improve platform reliability, performance, and feature development.

3 Legal Basis for Processing

• Contract performance: Processing necessary to provide the Ecomas service under our agreement with you.
• Legitimate interests: Improving the platform, preventing fraud, securing accounts, and analyzing usage patterns.
• Consent: Where you have given explicit consent for specific processing activities such as marketing communications.
• Legal obligation: Where processing is required to comply with applicable laws and regulations.

4 Data Storage and Security

• Data is stored on secure cloud infrastructure with encryption at rest and in transit using industry-standard protocols.
• Access to customer data is restricted to authorized personnel with a legitimate business need.
• We implement regular security audits, vulnerability assessments, and access reviews.
• Backup and disaster recovery procedures are in place to protect against data loss.

5 Data Sharing and Disclosure

• We do not sell customer data to third parties.
• Data may be shared with subprocessors that help provide hosting, infrastructure, email, analytics, payments, security, AI processing, and customer support.
• All subprocessors are bound by data protection agreements and are required to maintain appropriate security measures.
• Data may be disclosed if required by law, to protect the service, or to enforce legal agreements.

6 International Data Transfers

• Your data may be transferred to and processed in countries other than your country of residence.
• We ensure appropriate safeguards are in place for international transfers, including Standard Contractual Clauses where required.
• Data processing locations are disclosed in our subprocessor list and Data Processing Agreement.

7 Data Retention

• We retain account and system data for as long as your workspace remains active or as needed to provide services.
• Conversation records and commerce caches are retained or purged in accordance with workspace deletion configurations set by the controller.
• Aggregated, anonymized metadata may be retained indefinitely for analytics and performance modeling.
• We may retain data longer if required to satisfy tax, legal, reporting, or regulatory obligations.

8 Your Rights

• Access & Portability: Request details of data we process on your behalf or export your workspace data.
• Correction & Erasure: Rectify inaccurate records or request deletion of your account/workspace.
• Restriction & Objection: Limit or object to specific processing tasks, including marketing updates.
• Withdraw Consent: Revoke authorization for processing where consent is the legal basis.

9 Children's Privacy

• Ecomas is a business-to-business (B2B) service and is not designed for or targeted at children under 16.
• We do not knowingly collect or process personal data from anyone under the age of 16.
• If we learn that we have processed data from a child under 16 without appropriate verification, we will delete it immediately.

10 Cookies and Tracking

• We use cookies, session tokens, and local storage to secure logins, remember preferences, and analyze app use.
• We use essential cookies to maintain sessions and performance cookies to track user actions anonymously.
• You can control cookies through browser settings, but disabling them may limit platform access.
• For details, see our Cookie Policy.

11 Changes to This Policy

• We may update this Privacy Policy to reflect platform changes, security updates, or legal updates.
• Material updates will be notified in the admin dashboard, via email, or by updating the policy date.
• Continued use of the Ecomas platform after changes take effect indicates acceptance of the revised policy.

12 Contact Us