Trust Center

Security, Privacy & Trust

When you connect your store to Zbon, you are trusting us with your business data. We take that responsibility seriously. This page explains exactly how we handle your data, what access we request, and what we never do.

🔒TLS 1.3 Encryption
🛡️Read-only Store Access
🚫Zero Data Selling
✅GDPR Aware
🇸🇦PDPL Aware
💳Stripe PCI DSS
🗄️

What Data We Collect

✓Store name, platform type, and connected marketplace (Shopify, Salla, Zid)
✓Product catalog and inventory data — read-only
✓Order history and revenue metrics — read-only
✓Customer counts and segments — anonymized aggregates only
✓Account email and subscription details
✓AI-generated content you create within Zbon
🚫

What We Never Do

✗We never sell your data to third parties
✗We never access your store without your explicit OAuth authorization
✗We never store customer payment details or card numbers
✗We never modify your store data — all access is read-only
✗We never use your business data to train AI models for other customers
✗We never share your revenue data with advertisers
🛍️

Shopify OAuth Scopes

✓read_products — View your product catalog and inventory
✓read_orders — View order history and revenue data
✓read_customers — View customer counts and segments (anonymized)
✓read_analytics — View store analytics and performance data
✓read_inventory — View inventory levels and stock data
✓We request the minimum scopes required — nothing more
🏗️

Infrastructure & Hosting

✓Database: Supabase (PostgreSQL) — hosted in the EU
✓Backend: Render.com — US-based cloud infrastructure
✓Frontend: Vercel — global CDN with 99.99% uptime SLA
✓Payments: Stripe — PCI DSS Level 1 compliant
✓Email delivery: Resend — enterprise email infrastructure
✓All data in transit encrypted via TLS 1.3
✓All data at rest encrypted via AES-256
🤖

How AI Works in Zbon

✓AI agents use your Business DNA to generate personalized content
✓Your store data is used as context — never stored in AI models
✓AI providers used: Anthropic Claude, Google Gemini, Groq
✓All AI API calls are encrypted in transit
✓You own all AI-generated content — it is yours to use freely
✓AI outputs are suggestions — you approve all automated actions
⚖️

Compliance & Regulations

✓GDPR — We respect EU data protection rights
✓PDPL — We are aware of Saudi Personal Data Protection Law requirements
✓CCPA — California Consumer Privacy Act compliance in progress
✓SOC 2 Type II — On our security roadmap for Q4 2026
✓Data deletion: You can request full data deletion at any time
✓Data export: You can request a copy of your data at any time

Questions About Your Data?

If you have any questions about how we handle your data, want to request data deletion, or need a copy of your data — contact us directly.

hello@zbon.net

We respond to all data requests within 48 hours.

Last updated: May 2026 · Privacy Policy · Terms of Service