This Privacy Policy explains how Business-in-a-Box ("we", "us") collects, uses and protects information when you use our platform to run your business, and when your customers use stores hosted on our platform.
Information we collect
- Account information: your name, email address, phone number and a securely hashed password. We never store your password in plain text.
- Business information: business name, category, address, logo, contact numbers, products, prices and settings you add.
- Customer and order records that you or your customers create through your store: names, phone numbers, delivery addresses, order details and payment records.
- Technical information: IP address, browser type and activity logs used for security, fraud prevention and troubleshooting.
How we use information
- To provide the service: host your store, process orders, generate invoices and receipts, and send notifications you configure.
- To keep accounts secure, detect abuse and investigate problems.
- To communicate with you about your account, billing and important service changes.
We do not sell personal information. We do not send marketing messages to your customers on your behalf unless you choose to send them.
Merchants and their customers
Each business on the platform controls the customer data it collects through its store. Business owners are responsible for using customer information lawfully, including obtaining consent before sending marketing messages. Customer data belonging to one business is never shown to another business.
Third-party services
We use carefully selected providers to operate the service, such as cloud hosting, file storage, email delivery and AI text generation. When a business connects its own payment gateway (for example Paystack or Flutterwave) or WhatsApp Business account, payment and messaging data is processed by that provider under its own terms.
Data retention
We keep account and business data for as long as your account is active. You may request deletion of your account by contacting support. Some records may be kept longer where required by law or for legitimate business purposes such as resolving disputes.
Security
We use encryption in transit (HTTPS), hashed passwords, encrypted storage of integration credentials, role-based access controls and audit logs. No system is completely secure, so please use a strong password and keep it private.
Your rights
Depending on where you live, you may have the right to access, correct or delete your personal information, or to object to certain processing. Contact us to make a request.
Changes
We may update this policy from time to time. We will post the updated version on this page with a new "last updated" date.
Contact
If you have questions about this policy, please contact us through the Help Center.