Privacy Policy

1. Introduction

Welcome to ShopSync AI. ShopSync AI is owned and operated by Ovejit Das. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

ShopSync AI provides an AI-powered sales assistant tailored for F-Commerce businesses in Bangladesh. To provide our services, we interact with platforms like Facebook (Meta) on your behalf.

2. The Data We Collect

We may collect, use, store, and transfer different kinds of personal data about you which we have grouped together as follows:

• Identity Data: includes first name, last name, username, or similar identifier, and your business/shop name.
• Contact Data: includes billing address, email address, and telephone numbers.
• Financial Data: includes payment status and transactional details processed via secure payment gateways (e.g., PipraPay, bKash, Nagad, Rocket, SSLCommerz). Platform Escrow protection holds online payments securely until parcel delivery. We do not store raw credit card numbers.
• Verification & Identity Documents (KYC): includes merchant NID numbers, document images (NID front/back, selfie with NID, Trade License, BIN/TIN) uploaded for identity verification and merchant trust badge issuance. Documents are encrypted and accessible only to authorized Superadmins.
• Integration Data: includes Facebook Page IDs, page access tokens, customer messages, order details, and webhook event payloads required for AI auto-reply and sales automation.
• Technical Data: includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, and other technology on the devices you use to access this website.

3. How We Use Your Personal Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• Where we need to perform the contract we are about to enter into or have entered into with you (e.g., providing the AI sales assistant service).
• Where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests.
• To process your billing and manage your subscription.
• To train and improve the AI models specifically for your shop's context, maintaining strict data isolation between different clients.

4. Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way, altered, or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.

5. Third-Party Links & Integrations

This website may include links to third-party websites, plug-ins, and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

Meta (Facebook) Data: We adhere to all Meta Platform policies. The data accessed via the Graph API is strictly used to provide the AI messaging service to your specific page and is not sold or shared with external data brokers.

6. Google OAuth & Sign-In

ShopSync AI offers Sign in with Google as a convenient account authentication method, powered by Google OAuth 2.0. This section explains exactly what data we access, why, and how it is used.

Google Scopes We Request

• openid — Used to authenticate your identity and establish a secure session with ShopSync AI.
• profile (name, profile picture) — Used to personalise your ShopSync AI dashboard. Your name and photo are displayed within the app for identification purposes only.
• email — Used to create your ShopSync AI account, send order confirmations, billing invoices, and important security alerts.

What We Do NOT Access

ShopSync AI does not request access to your Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos, YouTube, or any other Google services beyond the basic profile scopes listed above. Our use of Google OAuth is strictly limited to account authentication.

How Your Google Data Is Used

• Google account data is used solely to create and manage your ShopSync AI account.
• Your Google profile data is never sold, rented, or shared with any third party, data broker, or advertiser.
• ShopSync AI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Data obtained via Google Sign-In is not used to serve you third-party advertisements.

Revoking Google Access

You may revoke ShopSync AI's access to your Google account at any time by visiting your Google Account Permissions page and removing ShopSync AI. Revoking access will not delete your ShopSync AI account data; to delete your account, please contact our support team.

7. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

8. Your Legal Rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to request access, correction, erasure, or restriction of processing of your personal data.

9. Contact Us

If you have any questions about this privacy policy or our privacy practices, please contact us via our support channels: