Last updated: 2026-09-22
When you register a store, we collect the business name, owner name, email address, and password (stored as a salted hash, never in plain text). As you use , we store the business data you enter — products, sales, customers, and team accounts — scoped to your store only.
We use this data to operate the service: authenticating your team, processing sales and inventory, generating reports, sending account-related email (verification, password reset, invites, billing receipts), and enforcing plan limits.
Payments are processed by PayMongo; we do not store your card details. Transactional email is sent via our SMTP provider. These processors only receive the data needed to perform their function (e.g. an amount and description for a payment, an address and message for an email).
Your store's data is retained for as long as your store is active. You can export a copy of your core business data at any time from Settings. Requesting deletion of your store starts a grace period, after which your data is permanently deleted from our systems.
Under the Philippine Data Privacy Act of 2012 (RA 10173) and similar laws, you have the right to access, correct, and request deletion of your personal data, and to object to certain processing. Contact your store's owner, or the platform operator, to exercise these rights.
Passwords are hashed with Argon2. Sessions use short-lived tokens with rotation and reuse detection. Every store's data is isolated from every other store at the database level.
We may update this policy from time to time. Material changes will be reflected by updating the date above.
Questions about this policy can be sent to the platform operator's designated contact.