Plaza Store respects your privacy. This policy explains what data we collect, how we use it, and your rights.
1. Data We Collect
We collect account information (name, email, phone), store configuration (branding, products, orders), usage analytics, and payment metadata. We do not store full card numbers.
2. How We Use Data
We use your data to provide the service, send transactional emails, improve the platform, and comply with legal obligations. We do not sell your data to third parties.
3. Data Sharing
We share data with sub-processors (hosting, payments, email) under strict data processing agreements. A full sub-processor list is available on request.
4. Data Retention
We retain information only for as long as needed for the purposes described here, to provide the service, maintain security and backups, resolve disputes, and meet legal, tax, and accounting duties. Different categories have different retention periods. Tenant customer data is returned or deleted after termination in accordance with the Data Processing Addendum, applicable backup cycles, and legal preservation requirements.
5. Your Rights
You have the right to access, correct, export, or delete your data at any time. Contact [email protected] to exercise these rights.
6. Security
We use technical and organisational safeguards appropriate to the nature and risk of the processing, including transport encryption, access controls, tenant-scoped authorization, logging, backups, and incident-response procedures. No system is completely secure, and this policy does not promise a specific architecture or certification unless it is stated in a signed service order.
7. Billing, Fees & Refunds
Subscription fees, billing cycles, renewals, cancellation timing, plan changes, taxes, failed payments, and refund eligibility are governed by the Billing and Cancellation Policy and the checkout disclosure shown when you purchase. Any restriction on refunds applies only to the extent permitted by mandatory law. Nothing in this policy removes rights relating to duplicate, unauthorized, incorrectly calculated, or otherwise unlawful charges. For billing questions email [email protected].
8. Connected Advertising Accounts
When you connect a third-party advertising account (such as Google Ads, Meta, TikTok, or Snapchat) to your Plaza dashboard, we receive access tokens that let Plaza act on that account on your behalf. For Google Ads we request only the adwords scope, and we use it solely to list the advertising accounts you can link, create and manage the campaigns you build in Plaza, and display performance reporting in your dashboard. Campaigns created through Plaza are always created paused so that no budget is spent without your explicit action. Access and refresh tokens are encrypted at rest, are isolated to your tenant, and are never shared with other merchants or sold to third parties. Google user data obtained through these scopes is not used for advertising, is not transferred except as required to provide this feature, and is not used to train generalized AI or machine-learning models. You can disconnect at any time from Marketing & Ads → Platforms; disconnecting revokes the token with the provider and stops all further access.
9. Contact
Privacy questions: [email protected]. DPA requests: [email protected].
Questions about this document? Contact our legal team