Privacy Policy

1. Who we are

This Privacy Policy explains how RemoteCuesCommerce ("we", "us") collects, uses, stores and shares personal data when you use our SaaS e-commerce platform (the "Service"). We are committed to protecting the privacy of our users (store owners and their staff) and, where applicable, the customers of the stores built on our platform.

2. Information we collect

a) Account data

When you register or use the Service we collect: your name, email address, a password (stored only in hashed form — we never store or view your plaintext password), an optional avatar, your role, and store profile details such as store name, store email, subdomain or custom domain, and store settings (shipping, taxes, currency, payment configuration, theme and SEO settings).

b) Store data (content you manage)

The Service stores the data you manage for your store, including: products and their images/descriptions/prices/stock; categories and brands; customers and their contact details (name, email, phone, address, city, country); orders, order items, status histories and invoices; coupons; tax rates; shipping zones; content management pages and menus; blog posts; FAQs; media uploads; newsletter subscription emails; and WhatsApp messages exchanged with customers.

c) Payment data

Online payments are processed by third-party providers (Stripe, Razorpay, PayPal). We do not see or store your customers' card numbers. We store only the payment method used, a transaction reference, the amount, currency and payment/refund status for order records and invoices.

d) Data you send us

If you use the contact form (name, email, subject, message) or contact support by email, we keep those communications to respond and improve support.

e) Technical data

When you use the Service we collect technical data such as IP address, browser user agent, device information, login timestamps and session markers. We keep error logs, audit logs of administrative actions, and backup copies of the database for data protection and security.

3. Why we process your data and legal basis

We process personal data to: provide and operate the Service you requested (performance of the contract); respond to your enquiries and provide support (legitimate interest); secure the platform and prevent fraud or abuse (legitimate interest); send you service communications and, with consent, product updates; and comply with legal obligations.

4. Cookies and similar

The admin dashboard uses a session cookie so that you can stay signed in, and a CSRF cookie to protect against cross-site request forgery. These are strictly necessary cookies; the Service does not run third-party advertising cookies. You can clear cookies in your browser, but the admin dashboard requires them to function.

5. How we share data

• Payment processors: Stripe, Razorpay and PayPal receive the information needed to process a payment on your store. Their privacy policies govern that processing.
• Infrastructure providers: the platform is hosted on third-party servers (currently Hostinger) and uses its standard logging.
• Service providers: providers we use to operate the Service (e.g., email delivery, analytics) receive only the data necessary to provide those services.
• Legal and safety: we may disclose data where required by law, order or that is established to protect our rights, or to prevent harm.

We do not sell personal data.

6. Data retention

We keep account and store data for as long as your account is active, and for a reasonable period afterwards to allow re-activation or compliance with legal obligations (including tax/invoice records). Contact form messages and logs are retained for our support and security purposes. Backups are retained on a rolling basis. To request deletion sooner, contact us.

7. Security

We protect your data with: hashed passwords (bcrypt), role-based access control, authenticated API tokens (Sanctum), HTTPS in transit, validation on all inputs, and audit logging of administrative actions. No method of transmission or storage is 100% secure — you should use a strong, unique password and keep your account credentials confidential.

8. Your rights

Depending on your jurisdiction you may have the right to: access, correct, obtain a copy of ("export"), or request deletion of your personal data; withdraw consent where processing is based on consent; lodge a complaint with a supervisory authority. You can update most of this data directly in your dashboard; you can also request the closure of your store account at any time. Such requests should be sent to support@remotecues.com and we will respond within 30 days.

9. Data of your customers

If you store data about your own customers (their names, contacts, orders, reviews), you are the data controller for that data under your own privacy obligations. We act as a processor/service provider for that data, and we only use it to provide you the Service. You are responsible for collecting that data lawfully, for your privacy notices, and for responding to your customers' requests.

10. Children

The Service is not directed to children under 18 and we do not knowingly collect their personal data. If you believe a child's information has been provided, contact us so we can remove it.

11. Changes to this Policy

We may update this Policy from time to time. We will post revised versions on this page and update the date above; material changes will be notified by email or in-app notice.

12. Contact

For privacy questions, data requests, or to exercise your rights, contact us at support@remotecues.com or via the contact page.