Privacy Policy - Shoppal Labs

1. Introduction

Shoppal Labs ("we," "us," "our") operates Shoppal, including Shoppal AI POS. This Privacy Policy explains our data practices, including what information we collect, how we use it, how we share it, and how we protect it.

By using Shoppal, you consent to the practices described in this policy.

2. Information We Collect

Account Information

When you register, we collect your legal name, email address, phone number, business name, and address.

Transaction & Business Data

We collect sales data, inventory information, customer purchase history, and other business metrics you enter into the Service. This data may be anonymized for analytics and AI processing.

Device & Usage Data

We automatically collect information about how you access and use Shoppal, including IP address, device type, operating system, browser type, page views, and timestamps. This helps us improve the Service and detect abuse.

Cookies & Tracking

We use cookies, pixels, and similar technologies to remember preferences, track usage, and deliver targeted advertising. You can manage cookies in your browser settings.

3. Shoppal AI & Third-Party Processors

Shoppal AI uses machine learning to analyze your business data and provide insights. We strive to process data locally where possible. However:

For complex AI processing, we may send anonymized business data to OpenAI (located in the United States)
OpenAI's privacy practices apply; review their policy at openai.com/privacy
We do not send personally identifiable information (names, emails) to OpenAI
Shoppal AI is in beta; outputs may be inaccurate and should not replace professional judgment

Important: Do not submit sensitive information (passwords, financial records, PII) in AI prompts.

4. How We Use Information

We use collected information to:

Provide, maintain, and improve the Service
Process transactions and send transactional emails
Generate AI insights and analytics
Respond to your inquiries and provide customer support
Send marketing communications (with your consent)
Detect and prevent fraud, abuse, and security threats
Comply with legal obligations
Enforce our Terms of Service

5. How We Share Information

We do not sell your personal information. We may share data with:

Authorized Personnel: Shoppal Labs employees, contractors, and agents who need access to operate, support, secure, and improve the Service, and who are bound by confidentiality and access-control requirements
Trusted Partners: Payment processors, cloud hosting providers, and analytics services (with data processing agreements)
OpenAI: For anonymized AI processing (see Section 3)
Legal Requirements: When required by law, court order, or government request
Business Transfers: In case of merger, acquisition, or bankruptcy
With Your Consent: For purposes you explicitly approve

6. Data Security

We implement industry-standard security measures to protect your information:

TLS 1.2+ encryption for data in transit
AES-256 encryption for sensitive data at rest
Secure firewalls and intrusion detection
Regular security audits and vulnerability assessments
Limited access to data (need-to-know basis)
PCI DSS compliance for payment data

However, no security system is impenetrable. We cannot guarantee absolute security.

7. Your Rights & Choices

You have the right to:

Access: Request a copy of your personal data
Correction: Update or correct inaccurate information
Deletion: Request deletion of your data (subject to legal retention obligations)
Opt-Out: Unsubscribe from marketing emails (click 'unsubscribe' in emails)
Portability: Request your data in a portable format

To exercise these rights, contact us at: privacy@shoppal.org

8. Cookies & Targeted Advertising

We use cookies and similar technologies for:

Session management (login, preferences)
Analytics (understanding how you use the Service)
Targeted ads from Google, Facebook, and other networks

You can manage cookies in your browser settings or opt out of personalized ads at:

9. Children's Privacy

Shoppal is not intended for children under 13. We do not knowingly collect data from children. If we become aware of such collection, we will delete it immediately.

10. International Data Transfers

Your data may be transferred to, stored in, and processed in the United States or other countries. By using Shoppal, you consent to such transfers. We implement safeguards (e.g., standard contractual clauses) to protect data in transit.

11. Data Retention

We retain personal data for as long as necessary to provide the Service and comply with legal obligations. Business transaction data is retained for 7 years for accounting purposes. You can request deletion at any time (subject to legal holds).

12. Third-Party Links & Services

Shoppal may contain links to third-party websites. We are not responsible for their privacy practices. Review their privacy policies before sharing information.

13. California Consumer Privacy Act (CCPA)

If you are a California resident, you have additional rights under the CCPA:

Right to know what personal data is collected
Right to delete personal data
Right to opt-out of data sales (we do not sell data)
Right to non-discrimination for exercising CCPA rights

Submit CCPA requests to: ccpa@shoppal.org

14. Changes to This Policy

We may update this Privacy Policy at any time. Material changes will be posted with a new "Last Updated" date. Your continued use of Shoppal constitutes acceptance of updated policies.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact:

Shoppal Labs Privacy Team

Email: privacy@shoppal.org

To protect our team, please direct privacy requests to the address above rather than to individual employees.