Privacy Policy

1. Introduction

Eekaam ("we", "us", or "our") operates the Eekaam e-commerce platform. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our Platform, whether as a Merchant or a visitor.

2. Information We Collect

Information you provide:

• Account information: name, email address, password, business name.
• Billing information: payment details processed through Paddle (we do not store credit card numbers).
• Store content: product information, images, and descriptions you upload.
• Communications: emails, support tickets, and feedback.

Information collected automatically:

• Device and browser information (type, version, operating system).
• IP address and approximate geographic location.
• Usage data (pages visited, features used, session duration).
• Cookies and similar tracking technologies.

3. How We Use Your Information

• To provide, maintain, and improve the Platform.
• To process payments and manage subscriptions.
• To send transactional emails (order confirmations, receipts).
• To communicate product updates, if you have opted in.
• To detect and prevent fraud and security issues.
• To comply with legal obligations.

4. Data Sharing

We do not sell your personal data. We share information only with:

• Payment processors (Paddle) — to process subscription payments.
• Hosting providers — to deliver the Platform infrastructure.
• Analytics providers — to understand Platform usage (anonymized where possible).
• Legal authorities — when required by law or to protect our rights.

5. Third-Party Integrations & Advertising

Merchants on the Platform may connect third-party services to their stores. When these integrations are enabled, certain data may be shared with those services:

Meta (Facebook & Instagram)

Merchants can connect their stores to Meta Platforms, Inc. to sell products on Facebook and Instagram. When this integration is active:

• Product catalog data (titles, descriptions, prices, images, availability) is shared with Meta Commerce Manager.
• Meta Pixel — a JavaScript tracking snippet may be placed on storefront pages to measure advertising effectiveness. This collects browsing behavior such as page views, product views, items added to cart, and purchases. This data is sent directly from your browser to Meta.
• Conversions API (server-side) — purchase events (order total, currency, product IDs, and hashed email/phone) may be sent from our servers to Meta for conversion measurement and ad optimization. Personal identifiers are hashed with SHA-256 before transmission.
• OAuth tokens — when a merchant connects their Meta account, we store an access token to manage their catalog and advertising on their behalf. Tokens are encrypted at rest and automatically refreshed.

Meta's use of this data is governed by Meta's Privacy Policy. Merchants can disconnect the Meta integration at any time from their store dashboard, which revokes data sharing. Storefront visitors can opt out of Meta tracking via Meta Ad Preferences.

Other Integrations

We may offer additional third-party integrations in the future. When new integrations that share personal data are added, this policy will be updated accordingly.

6. Data Security

We implement industry-standard security measures including encryption in transit (TLS), secure password hashing, and access controls. Payment processing is handled by PCI-compliant third-party providers. While we strive to protect your data, no method of transmission over the internet is 100% secure.

7. Cookies

We use cookies and similar technologies to maintain your session, remember preferences, and analyze traffic. You can manage cookie preferences through your browser settings. Disabling cookies may affect your experience on the Platform.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide Services. After account deletion, we retain data for up to 30 days for backup purposes, after which it is permanently deleted. We may retain certain data longer if required by law.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Request data portability.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@eekaam.com.

10. Children's Privacy

The Platform is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn that we have collected data from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a notice on the Platform. The updated policy will be effective upon posting.

12. Contact Us

For privacy-related inquiries, contact us at privacy@eekaam.com.