Privacy Policy

1. Information We Collect

1.1 Account Information

When you create a ProfitSync account, we collect:

• Name and email address
• Business name and details
• Password (encrypted and hashed)
• Billing information for subscription management
• Time zone and business preferences

1.2 Financial and Business Data

To provide our profit tracking services, we collect:

• E-commerce platform credentials (Amazon, Shopify, Etsy, etc.)
• Sales data, order information, and transaction details
• Product costs, inventory data, and pricing information
• Business expenses, receipts, and expense categorizations
• Bank account information (if connected for expense tracking)
• Advertising spend and campaign data

1.3 Usage Data

We automatically collect information about how you use ProfitSync:

• Login frequency and session duration
• Features accessed and reports generated
• Device information (browser, operating system)
• IP address and general location data
• Performance data and error logs

2. How We Use Your Information

2.1 Service Provision

• Calculate accurate profit margins and financial metrics
• Generate reports and analytics dashboards
• Sync data from connected e-commerce platforms
• Provide expense tracking and categorization
• Forecast cash flow and business trends

2.2 Account Management

• Create and maintain your account
• Process subscription payments
• Provide customer support
• Send important service notifications
• Communicate about new features and updates

2.3 Platform Improvement

• Analyze usage patterns to improve our service
• Identify and fix technical issues
• Develop new features based on user needs
• Ensure platform security and prevent fraud

3. Information Sharing and Disclosure

3.1 We DO NOT Sell Your Data

ProfitSync will never sell, rent, or trade your personal or financial data to third parties for marketing purposes.

3.2 Limited Sharing

We may share your information only in these specific circumstances:

• Service Providers: Trusted third-party services that help us operate ProfitSync (cloud hosting, payment processing, email delivery)
• Platform APIs: Secure connections to e-commerce platforms you authorize (Amazon, Shopify, etc.)
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfer: In the event of a merger or acquisition (with continued privacy protection)

3.3 Aggregated Data

We may use aggregated, anonymized data for:

• Industry research and benchmarking
• Product development insights
• Marketing materials (without identifying individual users)

4. Data Security

4.1 Security Measures

• Encryption: All data is encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based access with multi-factor authentication
• Infrastructure: SOC 2 compliant cloud hosting with regular security audits
• Monitoring: 24/7 security monitoring and intrusion detection
• Backups: Regular encrypted backups with secure storage

4.2 Platform Connections

When connecting to e-commerce platforms:

• We use OAuth 2.0 and official APIs when available
• Credentials are encrypted and never stored in plain text
• We request only the minimum permissions necessary
• You can revoke access at any time

5. Your Rights and Controls

5.1 Data Access and Portability

• View all data we have about you
• Export your data in standard formats
• Download comprehensive reports

5.2 Data Correction and Deletion

• Update or correct your personal information
• Delete specific data points or categories
• Request complete account deletion

5.3 Communication Preferences

• Opt out of marketing emails (service emails will continue)
• Choose notification frequency and types
• Update communication preferences anytime

6. Data Retention

We retain your data for the following periods:

• Active Accounts: Data retained while your account is active
• Canceled Accounts: Financial data retained for 7 years for tax/audit purposes
• Personal Data: Deleted within 30 days of account deletion request
• Aggregated Data: May be retained indefinitely in anonymized form

7. International Data Transfers

ProfitSync operates globally and may transfer data between countries. We ensure:

• Adequate protection through standard contractual clauses
• Compliance with GDPR, CCPA, and other privacy regulations
• Regular assessment of data transfer mechanisms

8. Cookies and Tracking

We use cookies and similar technologies for:

• Authentication and session management
• Preference storage and user experience
• Analytics and performance monitoring
• Security and fraud prevention

For detailed information, see our Cookie Policy.

9. Children's Privacy

ProfitSync is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will delete it immediately.

10. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable laws. We will:

• Notify you of significant changes via email
• Post updates on our website with effective dates
• Provide transition periods for major changes
• Maintain archived versions for reference

11. Contact Us

If you have questions about this Privacy Policy or our data practices: