Privacy Policy

1. Who We Are

Ops2Sell Ltd ("we", "us", "our") operates the Ops2Sell platform. We are the data controller for personal data processed through the Service. For any privacy-related enquiries, contact us at privacy@ops2sell.com.

2. Information We Collect

We collect the following categories of information:

• Account information: name, email address, company name, and role when you register.
• Business data: products, orders, inventory, customers, and supplier information you store within Ops2Sell.
• Usage data: pages visited, features used, and interaction patterns to improve the Service.
• Technical data: IP address, browser type, and device information for security and diagnostics.
• Integration data: data synced from connected sales channels (order details, product listings, inventory levels).

3. How We Use Your Information

We process your data for the following purposes:

• Providing and maintaining the Service
• Processing orders, inventory, and channel synchronisation
• Generating analytics, reports, and AI-powered insights
• Sending transactional emails (invitations, reports, alerts)
• Improving the Service based on usage patterns
• Ensuring security and preventing fraud
• Complying with legal obligations

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

Under the UK GDPR, we process your data based on: (a) contractual necessity (providing the Service you subscribed to); (b) legitimate interests (improving the Service, security); (c) consent (marketing communications, optional analytics); and (d) legal obligations (tax, regulatory compliance).

5. Data Storage & Security

Your data is stored using industry-standard security measures including encryption in transit (TLS 1.3) and at rest (AES-256). We use the following infrastructure providers:

• Supabase (PostgreSQL) — primary database, hosted on AWS EU
• Firebase (Google Cloud) — authentication services
• Vercel — application hosting and serverless functions
• Resend — transactional email delivery
• Stripe — payment processing (PCI DSS compliant)

All data is processed within the EU and UK. We do not transfer data outside the EEA without appropriate safeguards.

6. Data Retention

We retain your data for as long as your account is active. Upon account deletion, personal data is removed within 30 days. Business data exports are available for 30 days after cancellation. Anonymised analytics data may be retained indefinitely. Audit logs are retained for 12 months.

7. Third-Party Services

When you connect sales channels (WooCommerce, Shopify, Amazon, eBay, Etsy, TikTok Shop, OnBuy, Fruugo, ManoMano), we access only the data necessary for synchronising your products, orders, and inventory. Each integration is authorised by you and can be disconnected at any time.

8. Cookies & Tracking

We use strictly necessary cookies for authentication and session management. Optional analytics cookies are only set with your consent. You can manage your cookie preferences at any time via the cookie consent banner or your account settings.

9. Your Rights

Under the UK GDPR, you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data
• Portability — export your data in a machine-readable format
• Restriction — limit how we process your data
• Objection — object to processing based on legitimate interests
• Withdraw consent — where processing is based on consent

You can exercise most of these rights directly from your account settings (Settings → Data & Privacy). For other requests, email privacy@ops2sell.com. We will respond within 30 days.

10. Children

Ops2Sell is not directed at individuals under 18. We do not knowingly collect data from children. If we learn that we have collected data from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-app notification at least 30 days before they take effect. The "Last updated" date above reflects the most recent revision.

12. Supervisory Authority

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

13. Contact

For privacy-related questions, contact us at privacy@ops2sell.com.