Privacy Policy

1. Introduction

ShopLink Commerce OS ("ShopLink", "we", "us", or "our") respects your privacy and is committed to protecting the personal data of our users. This Privacy Policy explains how we collect, use, store, and share data when you use our platform, whether you are a Merchant building a storefront or a Customer visiting a Merchant's store.

2. The Dual Nature of Our Data Collection

Because ShopLink provides infrastructure for other businesses, we handle two distinct categories of data:

• Merchant Data: Information collected directly from business owners who register for a ShopLink account (e.g., name, email, phone number, business details, and billing information). We act as the Data Controller for this information.
• Customer Data: Information collected from buyers who visit a ShopLink-powered storefront (e.g., phone numbers entered for WhatsApp checkout, email addresses entered into a newsletter block, and browsing history). For Customer Data, the Merchant is the Data Controller, and ShopLink acts merely as the Data Processor storing the data on their behalf.

3. What Data We Collect

From Merchants:

• Account credentials (Email, Phone Number, Passwords securely hashed via Supabase Auth).
• Storefront configurations, product inventory, media uploads, and business metrics.
• Payment and subscription data (processed securely via our integrated payment gateways; we do not store raw credit card numbers).

From Customers (Processed on behalf of Merchants):

• Contact information (WhatsApp numbers or emails) entered during checkout or newsletter subscription.
• Order history, cart contents, and purchase frequency.
• Aggregated, anonymized storefront analytics (e.g., page views, button clicks) used to generate Business Intelligence reports for the Merchant.

4. How We Use Your Data

We use the data we collect to:

• Provide, maintain, and improve the ShopLink Commerce OS.
• Process merchant subscription payments and prevent fraudulent activity.
• Provide customer support and send critical system updates (e.g., subscription expiry warnings).
• Generate anonymized, aggregated insights to improve platform performance across our edge network.

We do not sell Merchant Data or Customer Data to third-party data brokers or advertising networks.

5. Data Storage & Security

ShopLink utilizes enterprise-grade cloud infrastructure (powered by Supabase and Vercel) to ensure your data is secure.

• All databases are protected by strict Row Level Security (RLS), ensuring that a Merchant can only access their own data.
• Data is encrypted in transit using TLS/SSL and encrypted at rest.
• In the event of a subscription expiration, data may be subject to our Automated Garbage Collection protocol, which securely and permanently deletes inactive store data after 90 days.

6. Cookies and Tracking Technologies

We use strictly necessary cookies to keep merchants logged into their administrative dashboards, and to maintain the state of the shopping cart for customers browsing storefronts (e.g., saving cart contents via localStorage so items are not lost during navigation). We do not use intrusive third-party tracking cookies on merchant storefronts without their explicit configuration.

7. Your Privacy Rights

Depending on your location, you may have the right to request access to, correction of, or deletion of your personal data.

• Merchants: You can update your profile information or request account deletion directly through the ShopLink Flutter Admin or by contacting support.
• Customers: Because your data is controlled by the Merchant you purchased from, you must contact the specific Merchant to request data deletion. ShopLink will assist Merchants in fulfilling these requests upon their authorization.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us via our official WhatsApp Support line linked in the footer of our main website.