Privacy Policy
Key Takeaways
- • We don't sell your personal data to third parties.
- • You have full GDPR rights.
- • Data is encrypted and securely stored.
1. Introduction
This Privacy Policy explains how eshopOS, operated by Osarian Solutions, collects, uses, stores, and protects personal data when you use our platform.
We process personal data in accordance with applicable data protection laws, including GDPR where relevant.
Privacy requests and legal notices may be sent to [email protected] unless a separate written agreement provides a different contact.
2. Information We Collect
We collect information required to operate and secure the platform.
- Account and identity data (name, email, phone, role).
- Business and billing data (store details, tax and payout configuration).
- Usage and technical data (logs, device/browser metadata, diagnostics).
- Customer and transaction data submitted by merchants.
3. How We Use Your Information
We use data to provide, secure, and improve services, and to comply with legal obligations.
- Authenticate users and prevent fraud or abuse.
- Process orders, payments, payouts, and support requests.
- Maintain reliability, analytics, and incident response.
- Send service and legal communications.
4. Data Sharing and Disclosure
We do not sell personal data. We share data only when necessary for service delivery, compliance, or lawful requests.
- Infrastructure and cloud service providers.
- Payment and financial service providers.
- Professional advisors and legal authorities when required.
5. Your Privacy Rights (GDPR)
Where GDPR applies, you may have rights to access, correct, delete, restrict, port, or object to processing.
- Request a copy of your personal data.
- Request correction of inaccurate data.
- Request deletion where legally permissible.
- Object to or restrict certain processing activities.
6. Data Security
We use technical and organizational safeguards including encryption in transit, access controls, monitoring, and security testing.
No system is absolutely secure, but we continuously improve controls based on risk and operational review.
7. Data Retention
We retain data only as long as needed for service delivery, contractual commitments, legal obligations, and legitimate operational purposes.
When retention is no longer required, data is deleted or anonymized according to our lifecycle controls.
8. Cookies and Tracking
We use essential cookies and similar technologies for authentication, security, session continuity, and performance measurement.
Where required, we provide controls for optional analytics or marketing-related tracking.
9. Children's Privacy
eshopOS is not directed to children and we do not knowingly collect personal data from children without appropriate legal basis.
If we learn that prohibited child data was provided, we will take steps to delete it.
10. International Data Transfers
Data may be processed in multiple jurisdictions where our providers operate.
For cross-border transfers, we apply safeguards such as contractual protections and security controls required by applicable law.
11. Changes to This Policy
We may update this policy as products, laws, or operational practices change.
Material updates will be announced through the platform or email, with a revised effective date.
12. Contact Us
For privacy requests or questions, contact our support and compliance team using the channels listed on the website.
We will verify identity where required before processing rights requests.
13. Connected Platform Imports
Merchants may choose to connect external commerce platforms and authorize eshopOS to import or synchronize data for migration and store operations.
We process connected-platform data on the merchant's instructions, only for the scopes and purposes described during connection and in the applicable service documentation.
- Shopify catalog migration currently uses product, collection, variant, inventory, location, and media data.
- The current Shopify connector does not request Shopify customer data. Customer data import will require separate disclosure, merchant authorization, and applicable platform approval before use.
- We do not sell merchant data, customer data, or connected-platform data.
- Imported data is protected under the same access control, retention, and deletion commitments described in this Privacy Policy and the Data Processing Agreement.