Privacy Policy

1. Who We Are

MoveShop (moveshop.dev) is a multi-tenant e-commerce platform that allows merchants to create and manage online stores. This policy explains how we collect, use, and protect data when you use our platform or connect third-party services such as Facebook and Instagram.

2. Data We Collect

When you create an account: name, email address, and password (hashed).

When you connect Facebook / Instagram (Meta): your Facebook name, Facebook user ID, and the OAuth access token used to manage your Meta Business account, catalog, and ad account on your behalf.

When you operate a store: product data, order data, customer names and email addresses, and inventory information that you upload or that your customers provide during checkout.

Automatically: server logs, IP addresses, and usage analytics for security and performance purposes.

3. How We Use Your Data

• Providing and operating the MoveShop platform and your store.
• Syncing your product catalog and inventory to Meta Commerce Manager.
• Sending transactional emails (order confirmations, password resets).
• Improving platform reliability, diagnosing errors, and preventing abuse.
• Complying with legal obligations.

We do not sell your personal data to third parties.

4. Sharing of Data

Data is shared only as necessary to operate the platform: with Meta (Facebook) when you connect your account, with our infrastructure providers (hosting, database, storage) under data processing agreements, and with payment processors for transaction handling. We do not share your data with advertisers or data brokers.

5. Data Retention

Account and store data is retained for as long as your account is active. If you close your account, personal data is deleted or anonymized within 30 days, except where retention is required by law (e.g., financial records).

If you disconnect your Facebook integration, all Meta access tokens and associated account identifiers are immediately cleared from our systems.

6. Your Rights

• Access: request a copy of the data we hold about you.
• Correction: update inaccurate or incomplete data.
• Deletion: request deletion of your personal data (see below).
• Portability: receive your data in a structured, machine-readable format.

7. Data Deletion

To request deletion of your data, email us at [email protected] with the subject line Data Deletion Request. We will process your request within 30 days and send a confirmation.

If you connected your Facebook account and removed MoveShop from your Facebook app settings, your Meta-linked data is deleted automatically via Facebook's data deletion callback.

8. Cookies

We use strictly necessary cookies for session management and authentication. No third-party advertising cookies are set by MoveShop itself. Your store may include Meta Pixel if you enable it — that pixel is governed by Meta's own privacy policy.

9. Security

All data is encrypted in transit (TLS) and at rest. OAuth tokens are stored using AES-256 encryption. Access to production data is restricted to authorized personnel only.

10. Contact

For privacy-related questions or requests, contact us at: [email protected]