Privacy Policy

1. Introduction

Welcome to Commerce Index, a product of Dispatch Global Services Inc (d/b/a DGS or Sagisu) ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you use our platform at commerceindex.com and commerceindex.com.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, business name, Shopify store URL
• Product Data: Product titles, prices, SKUs, inventory levels, images
• Deal Information: Discount codes, pricing rules, promotional campaigns
• Payment Information: Processed securely by Stripe (we never store credit card details)
• Communication: Support emails, feedback, survey responses

2.2 Automatically Collected Information

• Usage Data: Pages visited, features used, time spent, clicks
• Device Information: Browser type, IP address, operating system
• Cookies: Session tokens, authentication cookies, analytics cookies
• Performance Data: Deal views, clicks, conversions, revenue metrics

2.3 Third-Party Data

• Shopify: Product catalog, order data, customer information (with your authorization)
• Analytics Providers: Aggregated usage statistics
• Payment Processors: Transaction data from Stripe

3. How We Use Your Information

• Provide Services: Calculate CI Scores, generate AI recommendations, sync with Shopify
• Process Payments: Handle subscriptions, billing, and invoicing via Stripe
• Improve Platform: Analyze usage patterns, fix bugs, develop new features
• Communicate: Send service updates, deal alerts, marketing communications (opt-out available)
• Compliance: Meet legal obligations, prevent fraud, enforce terms of service
• AI Analysis: Generate deal recommendations, price intelligence, competitor analysis

4. How We Share Your Information

We share data only as follows:

• Service Providers: Stytch (authentication), Stripe (payments), Shopify (e-commerce), OpenAI (AI), Parallel.ai (price intelligence)
• Business Transfers: In case of merger, acquisition, or asset sale
• Legal Requirements: When required by law, court order, or government regulation
• Consent: When you explicitly authorize us to share

5. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: All data transmitted over HTTPS/TLS
• Access Controls: Role-based permissions, multi-factor authentication for admins
• Secure Storage: Passwords hashed with bcrypt, API keys encrypted
• Regular Audits: Security reviews, penetration testing, vulnerability scans
• Data Isolation: Multi-tenant architecture ensures merchant data separation
• Monitoring: 24/7 system monitoring, automated alerts for suspicious activity

6. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Export your data in machine-readable format
• Opt-Out: Unsubscribe from marketing emails
• Restriction: Limit how we process your data

To exercise these rights, email us at: privacy@commerceindex.com

7. Cookies & Tracking

We use cookies and similar technologies to:

• Essential Cookies: Session management, authentication (required for service)
• Analytics Cookies: Track usage patterns to improve the platform
• Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings, but disabling essential cookies may affect functionality.

8. Data Retention

• Account Data: Retained while your account is active
• Deal Data: Retained for 2 years after deal expiration
• Analytics Data: Aggregated data retained indefinitely
• Deleted Accounts: Personal data deleted within 30 days of account deletion
• Legal Holds: Data may be retained longer if required by law

9. Children's Privacy

Commerce Index is not intended for users under 18 years old. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately at privacy@commerceindex.com.

10. International Data Transfers

Commerce Index is based in the United States. If you access our service from outside the U.S., your data may be transferred to and processed in the United States. By using our service, you consent to this transfer. We comply with applicable data protection laws including GDPR for European users and CCPA for California residents.

11. Third-Party Services

We integrate with the following third-party services:

• Shopify: E-commerce platform integration (Privacy Policy)
• Stripe: Payment processing (Privacy Policy)
• Stytch: Authentication service (Privacy Policy)
• OpenAI: AI recommendations (Privacy Policy)

These services have their own privacy policies. We recommend reviewing them.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the new policy on this page with an updated "Last Updated" date
• Sending an email notification to registered users
• Displaying a prominent notice in the application

Your continued use after changes constitutes acceptance of the updated policy.

14. Regional Privacy Rights

For European Union (GDPR) Users:

• Legal basis for processing: Legitimate business interest, contract performance, consent
• Right to lodge complaint with supervisory authority
• Right to withdraw consent at any time
• Data Protection Officer: dpo@commerceindex.com

For California (CCPA) Users:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (we don't sell your data)
• Right to non-discrimination for exercising privacy rights