Privacy policy

This policy explains what EcomX Ecommerce Solutions (“EcomX”) collects when you use our services, what we do with it, and the choices you have. It covers two kinds of people: merchants, who have an EcomX account and run shops, and shoppers, who buy from those shops.

Merchants: what we collect

• Your name, mobile number and email, which you give us to create your account and sign in.
• Your shops’ details: names, addresses, logos, and the staff you add.
• Billing records: plans, payments, wallet entries and domains. Card and mobile-wallet details are entered on our payment provider’s page and never reach us.
• Security records: when and from which address someone signed in, and what was changed in a shop.

Shoppers: data we hold for merchants

When you order from a shop hosted on EcomX, your name, phone number, delivery address and order are held by us on behalf of that shop, which is responsible for them. We use them only to run the shop: to take and deliver your order, send you updates about it, and help the shop spot fraudulent orders. As part of that, the phone number on an order may be checked against couriers’ delivery records. Questions about an order, or requests about your data, go to the shop first; we will help them answer.

Customer Quality

To protect shops from parcels that are refused at the door, EcomX keeps its own delivery record for each phone number, built from courier deliveries made by every shop on EcomX: how many parcels were accepted, how many were refused, how many were sent back after delivery, and how many shops the number has bought from. From this we calculate a Customer Quality score. A shop you order from can see that score and those totals, but never which other shops you bought from or what you bought. The score helps a shop decide whether to call you before sending your parcel or to ask for part of the payment in advance; it never cancels an order by itself. Only the last two years of deliveries count. To ask about or correct your record, contact us using the details below.

Who helps us run EcomX

We share data only with the providers that run parts of the service, and only what each needs:

• Hetzner, who host our servers and databases in the European Union.
• Cloudflare, who carry traffic to our sites and shops, protect them, and store uploaded images.
• Resend, who deliver our emails, and Meta, who deliver WhatsApp messages.
• ZiniPay, who take payments for plans and wallet top-ups.
• NameSilo, who register domains bought through EcomX (with WHOIS privacy switched on).
• The couriers and SMS providers a merchant connects to their own shop.

We do not sell personal data, and we do not use it for advertising.

YouTube

A merchant can connect their own YouTube channel to upload product videos from the panel. When they do, they sign in with Google and allow EcomX one thing: to upload videos to that channel. We use that permission only to upload the videos the merchant chooses, as unlisted videos, so they can play on their shop. We do not read their channel, their other videos or anything else in their Google account, and we do not share what Google gives us with anyone. The video file is deleted from our storage as soon as YouTube has it. The merchant can disconnect in the panel at any time, which withdraws the permission at Google, or remove it from their Google account’s connected apps. Videos play through YouTube’s terms of service and Google’s privacy policy.

EcomX’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

We use cookies to keep you signed in and, in shops, to remember a cart. EcomX adds no advertising trackers. A merchant may add their own analytics or advertising tags to their shop; those are theirs, under their own policy.

How long we keep it

Account, shop and billing records are kept while your account is open and as long as the law requires afterwards. Request logs are deleted after about six weeks, and backups roll over within a month. When a merchant asks us to delete a shop, its data is deleted, including its shoppers’ data.

Your choices

You can see and correct most of your details in your EcomX account. To get a copy of your data, or to have it deleted, write to [email protected]. We answer within 30 days.

Security

Data travels encrypted, passwords are stored only as hashes, staff access to our systems needs a second factor, and every shop’s data is kept apart from every other’s. EcomX staff can open a shop’s panel to give support or keep the platform safe; anything they change there is shown in that shop’s activity log as EcomX support.

Changes

If we change this policy we will post the new version here, and tell merchants about significant changes before they apply. See also our terms of service.