Privacy Policy

This policy summarises what Tezgâh processes, why, and how it is protected. Legal details are in the Privacy Notice.

What we collect

• Account: name, e-mail, password hash, session and security logs.
• Content: your products, store plans, searches, assistant chats, support tickets.
• Connections: access tokens of the stores and suppliers you connect (AES-256 encrypted).
• Orders: orders and buyer shipping details from your connected stores (processed on your behalf).

How we use it

Only to provide and secure the service and to answer your requests. We do not sell your data, build advertising profiles or share it for marketing.

Who we share it with

• Hosting: the application and database run on a virtual private server (VPS) we rent; daily encrypted backups are kept on the same server.
• Payments: Lemon Squeezy LLC (USA) acts as the seller and Merchant of Record for subscriptions. We never receive your card details.
• AI: Google LLC (Gemini), Groq, Inc., Cerebras Systems, Inc., OpenRouter, Inc., OpenAI, L.L.C. (if enabled by the operator) — only the text and product data you submit to AI features.
• Sales channels you connect: Shopify Inc., eBay Inc., your WooCommerce site, Trendyol — product, stock, price, order and shipping data.
• Suppliers you connect: CJ Dropshipping, AliExpress (Alibaba Group), Printify, Inc. — the buyer's name, shipping address, phone and order lines needed to place the supplier order.
• Notifications: our e-mail (SMTP) provider and, if you enable it, Telegram Messenger Inc.
• Security and delivery: Cloudflare, Inc. (USA) — all traffic to the site passes through Cloudflare's network for attack and bot protection (IP address, browser data, requested URL); the human check on sign-up and sign-in (Turnstile); and, if enabled by the operator, a page-reading relay.
• E-mail delivery: verification, password-reset and notification e-mails are sent through our e-mail service provider (SMTP); only your e-mail address and the message.
• Technical: Google Fonts (fonts; your IP address reaches Google).

AI

Text you submit to AI features is sent to AI providers to generate a response; under free usage terms a provider may use it to improve its models. Do not enter personal or confidential information. Generated text and estimates may be wrong; review before publishing.

Security

Passwords are hashed with scrypt, access tokens are encrypted, each user can access only their own workspace, admin actions are logged and the database is backed up daily. To report a vulnerability see security.txt.

Your control

On the Account page you can export your data as JSON, remove connections and permanently delete your account.

Children

The service is not intended for anyone under 18.

Contact

[Company name] · [contact e-mail]

Last updated: 15 October 2026