Privacy Policy

We collect information you provide directly to us when you create an account, connect your store, or contact us for support. Account information: name, email address, password (encrypted). Store data: store URL, platform type (Shopify, Salla, Zid, WooCommerce), revenue data, order data, customer counts — accessed only with your explicit authorization via OAuth. Usage data: pages visited, features used, AI requests made, timestamps. Payment information: processed securely by Stripe. We never store your card details. Communications: emails or messages you send us.

We use the information we collect to: — Provide, maintain, and improve the Zbon platform — Generate AI-powered marketing content, strategies, and revenue insights for your store — Process payments and manage your subscription — Send transactional emails (account confirmations, billing receipts, recovery campaign emails on your behalf) — Respond to your support requests — Monitor platform security and prevent fraud — Comply with legal obligations We do not sell your personal data to third parties. We do not use your store data to train AI models for any purposes other than serving you.

When you connect your store via OAuth (Shopify, Salla, or Zid), we access: — Product catalog and inventory — Order history and revenue data — Customer counts and segments (anonymized) This data is used exclusively to power Zbon's AI features for your account. You can revoke access at any time by disconnecting your store from the Settings page or from your store's app settings.

We share your data only with trusted service providers necessary to operate Zbon: — Anthropic (Claude AI) — for AI content generation — Stripe — for payment processing — Supabase — for secure database hosting — Render & Vercel — for cloud hosting — Resend — for transactional email delivery All service providers are bound by data processing agreements and are prohibited from using your data for their own purposes.

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (e.g., billing records for up to 7 years). Store data synced via OAuth is deleted immediately upon disconnection.

We implement industry-standard security measures including: — Encrypted data transmission (HTTPS/TLS) — Encrypted password storage (bcrypt) — Secure token-based authentication (JWT) — Database access controls and audit logs — Regular security reviews No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.

Depending on your location, you may have the right to: — Access the personal data we hold about you — Request correction of inaccurate data — Request deletion of your data — Object to or restrict processing of your data — Data portability To exercise any of these rights, contact us at privacy@zbon.net. We will respond within 30 days.

Zbon uses minimal cookies necessary for authentication (session tokens). We do not use advertising or tracking cookies. We do not use third-party analytics services that track you across websites.

Zbon is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the platform. Your continued use of Zbon after changes become effective constitutes acceptance of the updated policy.

For privacy-related questions or requests: LidoMax LLC Email: privacy@zbon.net Website: https://zbon.net