Privacy Policy

1. Who we are

OpenEcommerce is operated by SuperShop Inc. (“we,” “us,” or “our”). This policy covers our website at openecommerce.ai and the OpenEcommerce application at app.openecommerce.ai, including accounts, workspaces, AI features, and connected services.

For privacy questions or requests, email sid@getsupershop.com.

2. Information we process

• Account information: your name, email address, profile image, account identifiers, and authentication information provided when you create or access an account.
• Workspace content: prompts, messages, uploaded files, documents, generated outputs, preferences, and other information you submit or save.
• Connected-service information: data and authorization tokens needed for integrations you choose to connect. What is available depends on the service and permissions you grant.
• Technical and support information: device and browser details, IP addresses, request logs, errors, usage information, and messages you send to us.

3. Google sign-in

When you choose Sign in with Google, Google and our authentication provider, Clerk, help verify your identity. We receive basic profile information, such as your name, email address, profile picture, and a Google account identifier, to create and secure your OpenEcommerce account. We do not receive your Google password.

Google sign-in alone does not grant OpenEcommerce access to your Gmail messages, Google Drive files, or Calendar. Connecting additional Google services is a separate action that requires the relevant permissions. You can review or revoke Google access in your Google Account connections settings. Revoking access does not automatically delete information already stored in OpenEcommerce; contact us to request deletion.

4. How we use information

We process information to authenticate users, provide and maintain workspaces, carry out requested tasks, generate AI responses, enable authorized integrations, respond to support requests, diagnose failures, prevent abuse, and meet legal obligations. We use account and operational information to administer and improve the service.

Where applicable law requires a legal basis, we rely on providing the service you request, your consent where required, our legitimate interests in operating and securing the service, or compliance with legal obligations.

5. AI features and connected services

To answer a request or perform an authorized task, relevant prompts, files, conversation context, and connected-service data may be sent to the model providers and integration services used for that task. Their processing is also governed by their applicable terms and privacy policies. Only connect services and submit information that you are authorized to use. Avoid including sensitive personal information that is unnecessary for a task.

Google user data is used to provide the features you request. Our use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is not sold, used for advertising, or used to train generalized AI or machine-learning models.

6. When information is shared

We share information as needed with service providers supporting authentication, hosting, storage, AI processing, integrations, and support; with services or recipients you direct us to use; and with people you choose to share workspace content with. We may also disclose information when required by law, to protect rights and security, or as part of a business transaction subject to appropriate protections. Google API data remains subject to the restrictions described above.

7. Cookies and similar technologies

OpenEcommerce and its authentication services use cookies, browser storage, and similar technologies to keep you signed in, protect sessions, and remember settings. You can manage cookies in your browser, but disabling required storage may prevent sign-in or other features from working.

8. Retention, deletion, and your choices

We retain information for as long as needed to provide the service, maintain security, resolve disputes, and comply with legal requirements. Retention depends on the type of information and why it is held. Backup or security records may remain for a limited period after deletion from active systems.

You can request access, correction, export, or deletion of your personal information or account by emailing sid@getsupershop.com from your account email. We may need to verify your identity. We will respond in accordance with applicable law. You can also disconnect integrations and revoke permissions at the relevant provider. Depending on your location, you may have additional rights to object to or restrict processing, withdraw consent, or complain to a data-protection authority.

9. Security and international processing

We use technical and organizational measures intended to protect information, but no system is completely secure. Our providers may process information in countries other than your own. Where required, we use appropriate safeguards for international transfers.

10. Children and changes to this policy

OpenEcommerce is intended for business users and is not directed to children under 18. If you believe a child has provided personal information, contact us. We may update this policy as the service changes. We will update the effective date and provide additional notice of material changes where required.

11. Contact

SuperShop Inc.
Email: sid@getsupershop.com