Privacy Policy

At easyShop, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our inventory and billing software. Please read this policy carefully.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address
• Password (encrypted)
• Shop name and address
• GSTIN (GST Identification Number)
• Phone number (optional)

1.2 Business Data

As you use the Service, we store:

• Product inventory data
• Invoice and billing information
• Customer information you enter
• Sales records and analytics
• Payment method preferences

1.3 Usage Information

We automatically collect:

• Device information (OS, browser, device type)
• IP address and location data
• Usage patterns and feature interactions
• Error logs and diagnostic data

1.4 Payment Information

Payment processing is handled by Razorpay. We do not store your credit card numbers or banking credentials. We only receive confirmation of successful payments.

2. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Process your subscription payments
• Send important service notifications and updates
• Provide customer support
• Improve and optimize the Service
• Detect and prevent fraud or abuse
• Comply with legal obligations
• Send marketing communications (with your consent)

3. Data Storage & Security

3.1 Data Storage

Your data is stored securely on cloud servers using MongoDB Atlas. Data is replicated across multiple locations to ensure reliability and availability.

3.2 Security Measures

We protect your data using:

• 256-bit SSL/TLS encryption for data in transit
• AES encryption for data at rest
• Secure password hashing (bcrypt)
• Regular security audits and updates
• Access controls and authentication
• Automated backups

3.3 Data Breach Notification

In the event of a data breach, we will notify affected users within 72 hours via email and provide guidance on protective measures.

4. Data Sharing & Disclosure

4.1 Third-Party Services

We share data with:

• Razorpay: For payment processing
• MongoDB Atlas: For data storage
• Cloud hosting providers: For service infrastructure

These third parties are contractually bound to protect your data and use it only for providing their services to us.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our rights and safety.

4.3 No Sale of Data

We do not sell, rent, or trade your personal information or business data to third parties for marketing purposes.

5. Your Rights & Choices

5.1 Access & Correction

You can access and update your account information and business data at any time through the Service.

5.2 Data Export

You can request a complete export of your data in CSV or JSON format by contacting us.

5.3 Account Deletion

You can delete your account at any time through account settings or by contacting support. Account deletion is permanent after the 90-day retention period.

5.4 Marketing Communications

You can opt out of marketing emails by clicking the unsubscribe link in any marketing email or updating your preferences in account settings. You will still receive essential service notifications.

6. Cookies & Tracking

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Analyze usage patterns
• Improve service performance

You can control cookies through your browser settings, but disabling cookies may affect Service functionality.

7. Data Retention

We retain your data:

• While your account is active
• For 90 days after account cancellation or deletion
• Longer if required by law or for dispute resolution

After the retention period, data is permanently deleted from our systems.

8. Children's Privacy

easyShop is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

9. International Data Transfers

Your data may be transferred to and processed in countries outside India. We ensure that such transfers comply with applicable data protection laws and that your data receives adequate protection.

10. Changes to Privacy Policy

We may update this Privacy Policy from time to time. Significant changes will be notified via email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.

11. Contact Us

For questions or concerns about this Privacy Policy or our data practices, please contact us: