How We Use Your Data

PippaSync only uses your data for the following lawful purposes:

🚀 PippaSync does NOT sell your personal data to third parties.

Legitimate Interests

• To improve our platform, develop new features, and analyze usage trends.

• To prevent fraud, security breaches, and unauthorized account access.

• To send important service-related notifications (e.g., system updates, downtime alerts.

User Consent

• We ask for explicit consent before sending marketing emails, promotional offers, and product updates.

• You can withdraw consent at any time by updating your preferences.

Legal Compliance

We may process your data to comply with tax regulations, anti-money laundering laws, and government requests.

What Data Do We Access from These Integrations?

When you connect an external platform to PippaSync, we may collect and process data from:

• ✔ Product listings and inventory data

• ✔ Order details (e.g., transaction ID, buyer name, shipping address)

• ✔ Marketplace fees, payments, and invoices

• ✔ Sales performance analytics

• ✔ Shipping and tracking information

How We Handle Third-Party Data

• You can manage API connections and revoke access anytime via PippaSync settings.

• We only retain third-party data as long as necessary for service functionality.

• We do not sell or share this data with unauthorized parties.

🚀 Important: Your access to third-party services is also subject to their respective privacy policies and terms. We encourage you to review them.

Types of Cookies We Use

How We Use Cookies & Tracking Technologies

• ✔ Improve User Experience: Store login details, session preferences, and navigation history.

• ✔ Analyze Website Traffic: Track how users interact with our website to improve performance.

• ✔ Security & Fraud Prevention: Detect suspicious behavior and unauthorized access attempts.

• ✔ Personalized Content: Display relevant product recommendations and updates based on your activity.

Third-Party Tracking & Analytics

We may use third-party services like Google Analytics, Facebook Pixel, and Hotjar to collect anonymous usage data and measure website effectiveness.

Managing Your Cookie Preferences

You can control or disable cookies through:

• Your browser settings (Chrome, Firefox, Edge, Safari).

• The cookie consent banner displayed when you first visit our website.

• Opt-out tools provided by third-party advertising networks.

Note: Disabling certain cookies may impact your ability to use some PippaSync features.

Responsibilities of Users (Data Controllers)

If you handle customer data via PippaSync (e.g., order details, buyer addresses), you are responsible for ensuring compliance with applicable data protection laws (GDPR, CCPA, etc.).

• ✔ Obtain proper consent from your customers before collecting personal data.

• ✔ Ensure customer data is processed lawfully, fairly, and transparently

• ✔ Respond to any data subject requests (e.g., right to access, delete, or rectify).

How PippaSync Protects Customer Data

• Encryption & Secure Storage:We use industry-standard encryption (AES-256) to protect sensitive data.

• Access Control:Only authorized users and personnel can access account data.

• Regular Audits:Our security protocols are reviewed periodically to ensure compliance.

Data Retention & Deletion

• We retain customer-related data only as long as necessary to fulfill the service agreement.

• You can request data deletion at any time via account settings or by contacting support.

• Upon account termination, all stored data is permanently deleted unless legal obligations require retention.

Your Rights as a User

Depending on your location, you may have the following rights regarding your personal data:

How to Exercise Your Rights

Users can submit data-related requests through the following methods:

• Account Settings: Some data updates and deletions can be made directly within your PippaSync account.

• Email Support: Contact our Data Protection Team at privacy@pippasync.com with your request.

• Official Request Form: Submit a formal request via our Privacy Request Portal (link provided in your account settings).

🔹 Verification Process: For security purposes, we may require identity verification before processing requests.

🔹 Response Time: We strive to respond within 30 days, with possible extensions for complex requests

Security Framework

• Encryption: All sensitive data is encrypted using AES-256 encryption in transit and at rest.

• Access Controls: Role-based access ensures that only authorized personnel can access sensitive information.

• Secure Authentication: Multi-factor authentication (MFA) and password hashing are enforced for user accounts.

• Regular Security Audits: We conduct penetration testing and vulnerability assessments regularly.

Fraud Prevention & Account Protection

PippaSync employs AI-driven threat detection to monitor unusual account activity and potential fraud.

• Session Tracking: Users can view and manage active logins from their account settings.

• Auto-Logout: Inactive sessions are automatically logged out for security reasons.

Login Alerts: Users receive notifications for logins from new devices or locations.

Incident Response & Breach Handling

• 24/7 Monitoring: Our security team continuously monitors for potential threats.

• Immediate Notification: In the event of a data breach, affected users will be notified promptly.

• Mitigation Measures: We take immediate action to secure data and prevent future breaches.

🔹 Report Security Concerns: If you suspect a security issue, email us at security@pippasync.com.

Where Your Data Is Stored

User data is stored securely in data centers located in the United States, European Union, and other regions, depending on user location and regulatory compliance.

• For U.S. Users:Data is stored in secure U.S.-based servers compliant with CISA, NIST, and SOC 2 standards.

• For EU & UK Users: Data is stored within GDPR-compliant data centers located in Europe.

• For Other Regions: Data may be processed in additional locations based on service needs and local legal frameworks.

International Data Transfers

To facilitate global operations, data may be transferred across regions, following strict security and compliance protocols. We ensure cross-border data transfers are compliant with:

• ✔ EU-U.S. Data Privacy Framework

• ✔ Standard Contractual Clauses (SCCs) under GDPR

• ✔ UK Data Transfer Addendum

• ✔ CCPA & CPRA Compliance for U.S. Customers

How We Protect Cross-Border Data

• ✔ End-to-End Encryption: All data transfers are secured using TLS 1.2/1.3 encryption.

• ✔ Third-Party Audits: Independent security reviews ensure compliance with regulatory requirements.

• ✔ Restricted Access: Only authorized personnel can access transferred data under strict controls.

🔹 User Control: If you have concerns about data transfers, you may request to store your data in a specific region by contacting our support team.

Third-Party Service Providers’ Responsibilities

• All third-party providers must sign strict data processing agreements to ensure compliance with GDPR, CCPA, and relevant privacy laws.

• We require third-party vendors to implement strong security measures, preventing unauthorized access to shared data.

Third parties cannot use shared data for purposes outside the agreed services.

How to Manage Third-Party Data Sharing

Users can manage their third-party integrations from their PippaSync account settings.

• Enable or Disable Integrations: Users have the ability to activate or deactivate integrations that require data sharing.

• Withdraw Consent: Users may revoke consent for third-party data sharing by contacting privacy@pippasync.com.

Request Data Deletion: Users can request that third-party providers delete shared data if permitted by law.

When We May Disclose Your Data

We may disclose user data in the following circumstances:

✔ Law Enforcement Requests & Fraud Prevention

We may share user data with law enforcement agencies if:

• It is necessary to detect, prevent, or investigate fraud, cybercrime, or security threats

• It is required to comply with a legally binding law enforcement request

• We will notify affected users before such data transfers occur.

• Users retain the right to opt out of continued service under new ownership.

🔹 User Notification: Unless prohibited by law, we strive to notify users before disclosing data in response to legal or law enforcement requests.

User-Controlled Data Deletion

Users have the right to request deletion of their personal data.

Steps to Request Data Deletion:

a. Through Account Settings

Users can initiate a self-service account deletion under "Privacy & Security Settings.

b. By Contacting Support

Email privacy@pippasync.com with a data deletion request (verification required).

c. Legal Restrictions on Deletion

• Certain data may be retained for legal, tax, or compliance reasons.

• We will inform users if some data cannot be immediately deleted due to legal obligations.

Anonymization & Aggregated Data

• Certain data may be retained for legal, tax, or compliance reasons.

• We will inform users if some data cannot be immediately deleted due to legal obligations.

🔹 Final Confirmation: Users will receive a confirmation email once their deletion request is processed.

How to Exercise Rights & Contact PippaSync

Users can submit requests via:

• Email: privacy@pippasync.com

• Account Settings: Manage data preferences directly in Privacy & Security Settings.

• Support Portal: Submit a request through our helpdesk.

We respond to all verified requests within 30 days, as per GDPR and CCPA guidelines.