Privacy Policy

Overview

UrShop (urshop.app) is a multi-tenant ecommerce SaaS platform that helps merchants operate online storefronts, manage products, process customer orders, and provide related ecommerce services. This Privacy Policy explains how UrShop handles personal data when merchants use the platform and when customers interact with UrShop-powered storefronts.

Each merchant operates an independent storefront on the UrShop platform. Customer information is scoped to the specific store or merchant where the customer interacts, and customer account data from one store is not intended to be shared with unrelated stores.

Privacy Responsibilities

For most storefront operations, the merchant determines how customer data is used for their store, including order fulfillment, customer service, store communications, product sales, and related business operations. UrShop processes data to provide, secure, maintain, and improve the platform.

Depending on the context and applicable law, the merchant and UrShop may have different privacy responsibilities. For questions about how a specific merchant uses your data for their own store operations, please contact that merchant directly. For questions about how UrShop handles platform data, contact us using the email address listed below.

Information We Collect

When you use UrShop or interact with a UrShop-powered storefront, we may collect the following types of information:

Account and profile data — such as your name, email address, phone number, and profile details you provide when creating or updating an account.
Authentication data — such as login method, authentication provider IDs, verification status, session data, and security-related account activity.
Third-party login provider data — identifiers and basic account information received from providers such as Google or Facebook when you choose to use those login methods.
Checkout and contact details — such as shipping address, billing details, phone number, delivery instructions, and other information entered during checkout.
Order, invoice, and support data — such as purchased items, order history, invoices, returns, customer service messages, and related store interactions.
Device, log, and security data — such as IP address, browser type, device information, timestamps, usage logs, and security events used to operate and protect the platform.

Merchants may enable customer account login methods such as email/password login, passwordless email login, Google Login, and Facebook Login. Available login methods may vary by storefront.

When you use Facebook Login, we only request the permissions needed for login, such as public_profile and email. Facebook may provide your name, Facebook user ID, and email address if available. We do not receive your Facebook password.

You can remove UrShop's access from your Facebook account at any time through Facebook Settings & privacy → Settings → Apps and Websites.

How We Use Information

We use personal data for the following purposes:

Authentication — verifying your identity, maintaining sessions, and helping protect accounts from unauthorized access.
Customer account features — managing customer profiles, order history, saved addresses, preferences, and related account functionality.
Checkout and order fulfillment — supporting order placement, payment processing, shipping, delivery, returns, and merchant order management.
Security and fraud prevention — detecting, preventing, and investigating unauthorized activity, abuse, fraud, and platform misuse.
Customer support — responding to questions, troubleshooting issues, and resolving disputes or technical problems.
Service maintenance and improvement — monitoring platform performance, fixing bugs, improving features, and maintaining platform reliability.
Legal and compliance purposes — meeting applicable legal, tax, accounting, security, and regulatory obligations.

We do not sell personal information. We may share information in the following limited circumstances:

With the relevant merchant — the merchant whose storefront you use can access customer and order data for their own store operations, fulfillment, customer service, and legal compliance.
With service providers — providers that help us operate the platform, including hosting, storage, email delivery, analytics, security, payment processing, content delivery, monitoring, and support tools. These providers are expected to process data only for the services they provide to us, subject to applicable contractual, confidentiality, and security obligations.
For legal compliance and protection — when required by law, regulation, court order, legal process, or when reasonably necessary to protect the rights, safety, property, or security of UrShop, merchants, customers, or others.
Business transfers — if UrShop is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate protections.

Data Retention and Deletion

We retain personal data only as long as reasonably necessary to provide the platform, support merchant storefront operations, maintain security, resolve disputes, enforce agreements, and meet legal, tax, accounting, or regulatory obligations.

When personal data is no longer needed, we delete or anonymize it where appropriate. Some records, such as completed orders, invoices, fraud prevention records, tax records, security logs, or legal compliance records, may need to be retained for a longer period where permitted or required by law.

To request deletion of customer account data connected to Facebook Login or another login method, please follow the instructions on our Data Deletion Instructions page.

Your Choices and Rights

Depending on your location and applicable law, you may have the right to request access to, correction of, deletion of, or restriction of certain personal data. You may also have the right to object to certain processing or request a copy of certain information.

To make a privacy request, contact us at support@urshop.app. Please include enough information for us to identify your account and the storefront or merchant domain where you interacted with UrShop. We may need to verify your identity before processing a request.

Security

We use technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration, and disclosure. However, no online service can guarantee absolute security. You are responsible for keeping your account credentials secure and for notifying us or the relevant merchant if you believe your account has been compromised.

International Processing

UrShop may process and store information in countries where we, our infrastructure providers, or our service providers operate. Data protection laws in those countries may differ from the laws in your location. Where required, we use appropriate safeguards for such processing.

Children's Privacy

UrShop is not intended for use by children who are not old enough to use online services under applicable law. Merchants are responsible for ensuring that their storefronts, products, and customer interactions comply with laws that apply to their business and audience.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this policy periodically.

Contact

If you have questions about this Privacy Policy or how UrShop handles platform data, contact us at support@urshop.app.