Privacy Policy

MASH ECO ("we", "us", or "our") is committed to protecting the privacy, security, and data integrity of all merchants, store owners, and platform visitors. This Privacy Policy explains how we collect, process, disclose, and safeguard your information when you utilize our multi-tenant SaaS platform, merchant dashboard, and administrative services.

1. Information We Collect

• Merchant & Account Identity: When you register for a merchant account, we collect your name, business name, phone number, email address, and store domain details.
• Store Management & Storefront State: We store your store configuration, theme preferences, domain mapping settings, and store availability mode (Online/Offline state).
• Order & Customer Transaction Data: Information regarding orders placed on your storefront, including customer delivery details, item breakdown, payment status, and parcel logistics tracking.
• Security & Session Monitoring: Data logged to maintain platform security, protect merchant accounts, and enforce access permissions.

2. How We Use Your Data

• To provide, operate, and maintain your multi-tenant e-commerce store and merchant dashboard.
• To manage subscriptions, package limits (e.g., product quotas), and automated billing cycles.
• To power built-in analytics, order tracking, and automated courier logistics integrations.
• To evaluate transaction security and prevent fraudulent activities.
• To enforce platform policies and manage account statuses (Active, Inactive, Pending, Suspended, or Banned).

3. Data Sharing & Third-Party Services

We do not sell your personal or merchant data. We share necessary data strictly with trusted third-party providers required to operate your store, including:

• Courier & Logistics Partners: Delivery details sent for automated order shipping and parcel tracking.
• Payment Gateways: Secure transaction parameters for processing subscription payments and customer checkouts.
• Infrastructure & Security Services: Cloud servers and secure hosting infrastructure.

4. Data Retention & Account Security

We implement industry-standard encryption, session security, and account protection mechanisms. You are responsible for preserving the confidentiality of your credentials and API keys.