Privacy Policy

2. Information We Collect

We only collect what we need to make OneShopAI work for you. Here's what that includes:

Account information

When you sign up, we collect:

• Your Name and email address
• A password (stored in encrypted form - we never see it in plain text)
• If you sign in with Google or LinkedIn, we receive your name and email from those providers. We don't access anything else from your connected accounts.

Verification data

When you verify your identity via OTP, we temporarily process your phone number or email to deliver the code. This isn't stored long-term.

Usage data

As you use OneShopAI, we collect basic activity data to keep the product working and improve it over time. This includes:

• Pages or features you visit
• Device type, browser and operating system
• IP address and general location (country/city level)
• Session duration and timestamps

We do not collect or store the content you create inside your OneShopAI workspace unless you explicitly share it with us (e.g., in a support request).

3. How We Use Your Information

Everything we collect has a specific purpose. We use your data to:

• Create and manage your user account
• Authenticate your identity and keep your account secure
• Deliver OTP verification codes via email or SMS
• Load and personalise your dashboard experience
• Monitor for unusual activity or security threats
• Improve features, fix bugs and develop the product
• Communicate important updates or service changes

We don't use your data for advertising, profiling or any purpose that isn't directly tied to how you use the platform.

4. Cookies and Tracking

We use cookies and similar technologies to keep you logged in and make the experience work smoothly. Here's a breakdown:

• Authentication cookies - keep you signed in across sessions. These are HttpOnly and secure.
• Preference cookies - remember your theme and language settings.
• Analytics cookies - help us understand how the product is used, so we can improve it. These are first-party only.

We don't use cookies for advertising or cross-site tracking. You can clear cookies from your browser settings at any time, though it may log you out.

5. Data Sharing

We don't sell your personal data. We don't share it with advertisers. We don't hand it over to data brokers.

There are a few situations where we do share information with third parties:

• Service providers - we work with trusted providers (e.g., email delivery, cloud hosting) that process data on our behalf under strict agreements.
• Legal obligations - if we're legally required to disclose information, we'll comply. Where permitted, we'll let you know.
• Business transfers - in the unlikely event of a merger, acquisition or sale, your data may be transferred. You'll be notified before that happens.

6. Data Security

We take security seriously and implement protections at every layer:

• All data in transit is encrypted using TLS 1.3
• Passwords are hashed and salted - we never store them in plain text
• Authentication tokens are stored securely with HttpOnly cookies
• OTP delivery is rate-limited and expires after a short window
• Access to internal systems is restricted and monitored

No system is 100% secure. But if we ever discover a breach that affects your data, we'll notify you promptly and take action to limit the impact.

7. Your Rights

You have the right to:

• Access your data - request a copy of what we hold about you
• Correct it - update or fix inaccurate information
• Delete it - ask us to remove your personal data entirely
• Export it - receive a portable copy of your data
• Withdraw consent - where processing is based on consent, you can revoke it at any time

To exercise any of these rights, contact us using the details at the bottom of this page. We'll respond within a reasonable timeframe and no later than what's required by applicable law.

8. Data Retention

We keep your data for as long as your account is active or as needed to provide the service. If you close your account, we'll delete your personal data within 30 days - unless we're required by law to keep certain records.

Aggregated, non-identifiable data (like usage statistics) may be retained indefinitely for product improvement purposes.

9. Changes to This Policy

We'll update this policy from time to time as the product evolves or regulations change. When we make significant changes, we'll notify you via email or an in-app notice - not just a quiet update buried in the footer.

The 'Last Updated' date at the top of this page always reflects the most recent version. Continuing to use OneShopAI after changes take effect means you accept the updated policy.

10. Contact Us

If you have questions about this policy, want to exercise your data rights or just want to talk through a concern - we're easy to reach.

• Email: support@oneshopai.com
• Address: O95, SECTOR 12, NOIDA 201301
• Response time: We aim to respond to all requests within 5 business days.

This policy is written to be read, not just stored in a drawer. If anything is unclear, please ask - we'll explain it in plain English.