We collect information you provide directly, including: account registration details (name, email, phone number, business name), customer data you import or create, message content sent through the platform, and billing information processed by Stripe.
We automatically collect: usage data (pages visited, features used), device information (browser type, IP address), and performance metrics to improve the Service.
We use your information to: (a) provide and maintain the Service; (b) process messages and communications on your behalf; (c) manage billing and subscriptions; (d) send service notifications and updates; (e) improve the Service and develop new features; (f) ensure security and prevent fraud.
BizSync integrates with third-party services to provide its functionality. Your data may be shared with these services as necessary to operate the platform:
Each third-party service has its own privacy policy governing their use of your data.
Your data is stored on secure servers provided by Supabase (PostgreSQL with Row Level Security). All data in transit is encrypted using TLS. We implement industry-standard security measures including multi-tenant data isolation, access controls, and regular security reviews.
We retain your data for as long as your account is active. Upon account deletion, we will delete your data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records, compliance logs).
You have the right to: (a) access your personal data; (b) correct inaccurate data; (c) request deletion of your data; (d) export your data in a machine-readable format; (e) opt out of non-essential communications. To exercise these rights, contact us at privacy@ecomeasy.io.
When BizSync is installed as a Shopify app, we respond to Shopify's three mandatory GDPR webhooks on behalf of the merchant:
All GDPR requests are logged in an internal audit table (gdpr_requests) that records the shop, customer identifier, request kind, status, and completion timestamp.
If you choose to connect a Google Ads, Google Analytics, Google Search Console or Google Business Profile account, BizSync accesses Google user data on your behalf through Google OAuth. You can connect or disconnect at any time. We request only the access needed for the features described below.
https://www.googleapis.com/auth/adwords) — we read your ad account's campaign performance (spend, clicks, impressions, conversions, budgets, status) and search terms reports so we can show them in your BizSync Advertising dashboard. Only when you click the matching button in BizSync, we can also pause or enable a campaign, change a campaign's daily budget, or add a negative keyword. We never make these changes automatically or without your action.https://www.googleapis.com/auth/analytics.readonly) — we read your Google Analytics 4 property's traffic, traffic sources, top pages, device breakdown, and conversion data to display them in your BizSync Analytics dashboard. This access is read-only; BizSync never writes to or changes your Google Analytics account.https://www.googleapis.com/auth/webmasters.readonly) — we list the verified Search Console properties your Google account can see so you can pick the one for your website, and we read that property's search performance data (clicks, impressions, click-through rate, average position, top search queries and top pages for the last 28 days and the 28 days before) to display it on your BizSync SEO “Your site” page and next to your keyword lists. This access is read-only; BizSync never writes to or changes your Search Console account.https://www.googleapis.com/auth/business.manage) — we read the Business Profile accounts and locations you manage (name, title and storefront address) and the customer reviews on those locations to display them in your BizSync Reviews inbox. For reviews rated 4 stars or more, the review text, star rating and the reviewer's display name are sent to our AI provider (Google's Gemini API) to draft a reply you can edit before it is posted; you can also ask for a new draft from a review. When you click “Post reply” on a review in BizSync — or, only if you switch on auto-reply in your Reviews settings, automatically for reviews at or above the star rating you choose — we post that reply to the review's owner-reply field. BizSync makes no other change to your Business Profile (no edits to business information, hours, posts, photos or locations).We use Google user data only to provide and improve the user-facing features you requested inside BizSync (viewing and managing your ad performance, viewing your website analytics and search performance, and reading and replying to your Google reviews). We do not use it for any other purpose, including advertising, profiling, or credit decisions. Google user data is shown only to members of your own organization.
Google OAuth tokens are encrypted at rest using AES-256-GCM and stored separately for each organization. Data is encrypted in transit using TLS and isolated per organization using Row Level Security. Access to tokens is restricted to the server-side code that calls Google APIs on your behalf.
We do not sell Google user data. We do not transfer or disclose it to third parties except (a) as necessary to provide or improve the features you requested, using service providers bound to protect it (for example, our database host, and Google's Gemini API, which processes Google review text to draft replies as described above), (b) for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) as part of a merger or acquisition with notice to you. Humans at BizSync do not read your Google user data unless you ask for support and give consent, it is needed for security, or the law requires it.
We do not use Google user data to develop, improve, or train generalized AI or machine-learning models. Review text sent to Google's Gemini API is used only to draft the reply you asked for.
When you click Disconnect in BizSync, we revoke the Google token and delete the stored tokens — for Google Ads, Google Analytics, Google Search Console and Google Business Profile alike. What happens to data already imported depends on the type: your stored Search Console reports are deleted when you disconnect Search Console; ad and analytics totals already shown in your dashboards and Google reviews already imported into your Reviews inbox are kept in your BizSync account history until you ask us to delete them (email the address below) or delete your account, and are then deleted within 30 days. You can also revoke BizSync's access at any time from your Google Account permissions page. To request deletion of any Google user data we hold, email privacy@ecomeasy.io.
BizSync's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We use essential cookies for authentication and session management. We use localStorage to persist user preferences (theme, sidebar state). We do not use third-party tracking cookies.
The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service. Continued use of the Service after changes become effective constitutes acceptance of the revised policy.
For questions about this Privacy Policy, contact us at privacy@ecomeasy.io.
Ecom Easy LLC
United States