Privacy Policy

1.1. Information You Provide

• Account Information Your name, email address, company name, and any other details you provide during account creation.
• Uploaded Data Data you manually upload, such as spreadsheets, reports, or other documents, to enable analytics and insights.
• Support Requests Any information you share when contacting customer support, including details about issues or feedback.

1.2. Information from Integrated Sources

• Amazon SP-API Seller Central reports, inventory data, and other metrics needed for analytics.
• Other Integrated Tools Data from other ecommerce platforms or services you link with Spryg.

1.3. Automatically Collected Information

• Usage Data Pages visited, features used, clicks, and time spent on the platform.
• Device Information Details about your device, such as browser type, operating system, IP address, and screen resolution.
• Performance Metrics Errors, crashes, and other system diagnostics to maintain platform reliability.

2.1. To Provide and Improve Our Services

• Deliver tailored ecommerce analytics and insights based on your data.
• Process and analyze information from Seller Central, SP-API, or other integrated platforms.
• Enhance the functionality, performance, and usability of the Spryg platform.

2.2. To Communicate with You

• Send important notifications, updates, and announcements about our services.
• Respond to your inquiries, support requests, or feedback.
• Share information about new features, promotions, or service enhancements.

2.3. To Ensure Security and Compliance

• Safeguard your data and maintain the security of the platform.
• Detect and prevent unauthorized access, fraud, or other malicious activities.
• Comply with legal and regulatory requirements applicable to our operations.

2.4. To Generate Business Insights

• Create anonymized or aggregated datasets to analyze platform trends.
• Develop new tools, features, and insights based on overall usage patterns.

3.1. With Your Consent

• We share your information with third parties only when you explicitly authorize us to do so, such as connecting with external platforms or services.

3.2. With Trusted Service Providers

We may share your information with third-party vendors who assist in operating our platform, including:

• Hosting and cloud service providers.
• Analytics and performance monitoring tools.
• Customer support services.

These providers are contractually obligated to handle your data securely and use it solely for the purposes outlined in this Privacy Policy.

3.3. For Legal Compliance

We may disclose your data when required to:

• Comply with legal obligations, such as court orders, subpoenas, or regulatory requirements.
• Protect our rights, property, or safety, as well as that of our users or others.

3.4. In Business Transfers

In the event of a merger, acquisition, or sale of our assets, your information may be transferred as part of the business transaction. We will notify you of such changes and provide options regarding your data.

4.1. Active Account Retention

• Data is retained for the duration of your active account to deliver our services effectively.

4.2. Account Closure or Inactivity

• When your account is closed or inactive for an extended period, we will delete or anonymize your data, unless retention is required by law or for legitimate business purposes.

4.3. Compliance and Legal Requirements

• Certain information may be retained for a limited time to fulfill legal, tax, or accounting obligations, resolve disputes, or enforce agreements. We take appropriate measures to ensure secure deletion or anonymization of your data when it is no longer needed.

5.1. Data Encryption

• All sensitive data is encrypted during transmission using secure protocols (e.g., TLS 1.2 or higher). Data at rest is encrypted using strong encryption standards, such as AES-256, to protect against unauthorized access.

5.2. Access Controls

• Access to sensitive systems and data is restricted based on roles and responsibilities, following the principle of least privilege. Multi-factor authentication (MFA) is enforced for administrative and critical access points to enhance security.

5.3. Secure Application Architecture

• Our platform is built with security-first principles, incorporating regular code reviews, vulnerability assessments, and penetration testing. Secure software development lifecycle (SDLC) practices are followed to identify and mitigate risks early in development.

5.4. Incident Response

• A robust incident response plan is in place to address security breaches swiftly and minimize impact. This includes reporting to third parties affected. We perform regular testing of incident response procedures to ensure readiness.