Who is responsible
This draft describes Managent for Retail. The legal operating entity, registered address and privacy contact must be confirmed before this notice is finalized. The roles and responsibilities for processing a store’s customer data may also need a separate data-processing agreement.
Information you provide
Account information includes your email, sign-in identity, name and preferences. Store information may include a business name, address, website, locations, contact details, social profiles and delivery listings. Documents, assessment inputs, saved app records, content drafts and connected-service settings are stored when you use those features. Only upload information you are authorized to share.
Public information and technical records
Assessments and store discovery use public business sources. Business-directory information may come from public datasets and business-search providers. Requests, authentication events and service errors may generate technical records needed to run and protect the service. A public business record can still contain personal information.
How we use information
We use account and store information to provide sign-in, save your workspace, generate assessments and content, support connected features, process subscription requests and deliver requested messages. Public details can enrich your Store Profile. Information is also used to investigate errors, prevent misuse and meet applicable obligations. The lawful bases for each processing activity must be confirmed for the operating entity and markets served.
AI processing
Google’s AI services are used for public research and structured assessments. Optional chapter inputs are sent for assessment synthesis. Private notes and selected document content are included when private context is enabled. Private notes and documents are excluded from the public search request; profile-detail extraction uses the public research dossier. AI-generated information can be incomplete or wrong. Review it before use.
Providers and connected services
The implementation uses Google/Firebase for authentication and data services, Google business-search and AI services, Resend for transactional messages, and Stripe for billing. Content and commerce workflows may use additional providers or Shopify when configured. Providers receive information relevant to their function. Their own terms and privacy notices also apply to their services. The complete provider list, contractual safeguards and international transfer arrangements must be confirmed before this notice is finalized.
Payments and messages
Payment collection and billing management use Stripe. The application stores billing identifiers and subscription information rather than collecting full card details in its own forms. Requested reports, sign-in codes and enabled weekly assessments are service messages. Weekly delivery preferences are available in the assessment workspace. Requesting an assessment does not itself subscribe you to a separate marketing list.
Retention and removal
Saved profiles, uploaded documents, assessment reports and history are retained in your workspace. Removing a document excludes it from future research; it does not erase earlier reports or archived profile versions. Editing a profile can retain a historical copy. A full historical-data deletion and retention-management interface is not currently provided. Retention periods, backup handling and the process for deletion requests must be specified before this policy is finalized.
Your choices and rights
You can edit your profile and preferences, remove uploaded documents and turn off weekly assessments. Depending on applicable law, rights may include access, correction, deletion, portability, restriction or objection, withdrawal of consent and complaints to a regulator. Identity verification may be required. The verified contact and request process must be added before launch.
Security and policy changes
Accounts and stored workspaces use access controls. No service can guarantee absolute security. Do not upload passwords, payment-card details or unnecessary sensitive personal data. Material changes to this notice should be communicated through the service or another appropriate channel.
Business-search provider information
Google-powered business search is also subject to the Google Maps / Google Earth Additional Terms of Service and Google Privacy Policy.