Privacy Policy

Your privacy matters. This policy explains what data EcomScout collects, why, and how we protect it.

1. Information We Collect

• Account info: name, email, password (hashed with bcrypt)
• Payment info: processed by Paystack — we never see your card details
• Outreach credentials: SMTP host, port, username, and password (encrypted at rest)
• Scan input: Shopify store URLs you submit
• Usage data: pages visited, scans run, anonymized analytics via PostHog

2. How We Use Your Information

• To deliver and improve the EcomScout service
• To process payments and manage your subscription
• To send transactional emails (login alerts, payment confirmations)
• To respond to support requests
• To detect and prevent fraud or abuse

We do not sell your data to third parties. Ever.

3. Data Storage & Security

• Passwords are hashed with industry-standard bcrypt
• SMTP passwords and social-platform session data are encrypted with Fernet (AES) before storage
• All traffic uses HTTPS / TLS
• Database access is restricted to authorized administrators only
• JWTs expire and can be revoked at any time

4. Third-Party Services

We use the following sub-processors:

• Paystack — payment processing
• PostHog — anonymized product analytics
• MongoDB Atlas — encrypted database hosting
• Your SMTP provider — when you launch an email campaign, your provider (Gmail, Zoho, etc.) processes the send

5. Your Rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and all associated data
• Export your scan data via CSV at any time
• Withdraw consent and close your account

To exercise any of these rights, email jarklayer4@gmail.com.

6. Data Retention

We retain your account data as long as your account is active. When you close your account, we delete your personal data within 30 days, except where retention is required by law (e.g., financial records for tax purposes).

7. Cookies

EcomScout uses essential cookies for session management (JWT) and anonymized analytics cookies via PostHog. You can disable cookies in your browser settings, though some features may not work properly.

8. Children's Privacy

EcomScout is not intended for children under 18. We do not knowingly collect data from minors.

9. International Transfers

EcomScout is operated from Nigeria. By using the Service, you consent to the transfer of your data to Nigeria and other jurisdictions where our sub-processors operate.

10. Changes to This Policy

We may update this Privacy Policy. We will notify you via email or in-app banner for material changes. The "Last updated" date reflects the most recent revision.

Contact

Email: jarklayer4@gmail.com
WhatsApp: 09064691203
Founder: Emmanuel Olamide · Lagos, Nigeria.