Privacy Policy

1. Information We Collect. We collect personal information that you provide directly to us when you use our services. This includes your name, email address, phone number, and any order identification numbers necessary to resolve support tickets. We do not collect sensitive payment data such as credit card numbers — all payment processing is handled by Stripe or PayPal.
2. How We Use Your Information. Your information is used solely to provide e‑commerce support services: processing returns, resolving chargebacks, communicating with marketplaces, and improving our support quality. We never sell or rent your personal data to third parties.
3. Account Access. When you grant us access to your Shopify, Amazon, or Etsy store, we only request read‑only permissions where possible. All access tokens are revoked immediately after your case is resolved, and we never store your marketplace passwords in plain text.
4. Cookies and Tracking. Our website uses functional cookies to maintain session state and analytical cookies (GDPR‑compliant) to understand how visitors interact with our site. You may disable cookies in your browser, though some features may not work as intended.
5. Data Retention. We retain your personal data for 18 months after your last interaction with us. After that period, all identifiable information is anonymized and used only for aggregate statistical analysis.
6. Encryption and Security. All communications between your browser and our servers are encrypted using 256‑bit TLS. Internal team communications and data storage also follow industry‑standard encryption practices.
7. Third‑Party Subprocessors. We use trusted third‑party tools such as Slack, HubSpot, and Google Workspace to manage internal workflows and customer communication. Each of these providers is bound by a Data Processing Agreement (DPA) that meets GDPR requirements.
8. Children’s Privacy. Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with data, please contact us immediately.
9. Your Rights (GDPR). If you are located in the European Economic Area, you have the right to access, rectify, or erase your personal data. You may also object to or restrict certain processing. To exercise these rights, email our Data Protection Officer at support@assistlyx.com.
10. California Consumer Privacy Act (CCPA). California residents have the right to request disclosure of the categories and specific pieces of personal information we have collected, as well as the right to request deletion of that information. We do not discriminate against users who exercise these rights.
11. Do Not Track. Our website does not respond to Do Not Track signals at this time. However, you may opt out of certain tracking through your browser settings.
12. Automated Decision‑Making. We do not engage in automated profiling or decision‑making that produces legal or similarly significant effects. Every support case is reviewed by a qualified human agent.
13. International Data Transfers. Your information may be transferred to and processed in countries other than your own. We ensure that such transfers are protected by appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.
14. Data Breach Notification. In the unlikely event of a data breach that compromises your personal information, we will notify affected users within 72 hours of becoming aware of the incident, as required by GDPR.
15. Policy Updates. We may update this Privacy Policy from time to time. Material changes will be communicated via email at least 14 days before they take effect. The current version is always available on this page.
16. Contact Us. For any privacy‑related inquiries, you can write to our Data Protection Officer at support@assistlyx.com or send physical mail to 605 3rd St, Encinitas, CA 92024, USA.
17. Complaints. If you believe we have not adequately addressed your privacy concerns, you have the right to lodge a complaint with your local data protection authority.
18. Third‑Party Links. Our website may contain links to external sites. We are not responsible for the privacy practices or content of those sites.
19. Business Transfers. If Assistlyx is involved in a merger, acquisition, or asset sale, your personal information may be transferred as a business asset. We will notify you before your data becomes subject to a different privacy policy.
20. Legal Basis (EEA Users). For users in the EEA, our legal basis for processing personal data is your consent (which you may withdraw at any time) or the necessity of processing to perform a contract with you.
21. Email Communications. We send service‑related emails (ticket updates, invoices) and, with your separate consent, marketing newsletters. You can unsubscribe from marketing emails at any time.
22. Phone Numbers. If you provide a phone number, we use it only for urgent support cases and never for telemarketing. You may request that we delete your phone number at any time.
23. Data Portability. Upon request, we will provide you with a copy of your personal data in a structured, commonly used, machine‑readable format.
24. How to Withdraw Consent. You may withdraw consent for any processing activity at any time by emailing support@assistlyx.com. Withdrawal will not affect the lawfulness of processing before withdrawal.

Back to Home