Privacy Policy

EcommOS is an ecommerce operations platform provided by Applied Significance Technologies Limited in Nigeria. This policy applies to our website, applications, hosted order forms, support channels, and integrations.

For account, billing, website, and support information, EcommOS determines why and how the information is used. For customer, order, and lead information entered by a merchant or received from a merchant's connected channel, the merchant generally determines why the information is used and EcommOS processes it to provide the service.

Depending on how you interact with EcommOS, we may collect:

• Account information, including name, email address, login credentials, role, and organization.
• Business information, including products, offers, staff records, inventory locations, delivery partners, operational notes, accounting entries, and configuration settings.
• Customer and order information, including name, phone number, email address, delivery address, selected product, order value, form answers, order status, and communication history.
• Integration information, including connected account identifiers, form and advertiser identifiers, campaign attribution, authorization tokens, webhook events, delivery logs, and external lead identifiers.
• Technical and usage information, including IP address, browser and device information, session data, pages visited, diagnostics, security events, and approximate usage activity.
• Support communications sent through email, WhatsApp, or other support channels.

We receive information:

• Directly from account holders, staff members, customers, and people who contact us.
• From merchants that use EcommOS to manage their customers and orders.
• From connected services such as TikTok, form providers, and webhook sources after an authorized user connects the service.
• Automatically from browsers, devices, application logs, and security systems.

We use personal information to:

• Provide, authenticate, secure, and support EcommOS accounts and organizations.
• Capture, route, fulfil, reconcile, and report on orders and related operations.
• Import authorized leads and form submissions from connected sales channels.
• Send transactional email, push notifications, and operational alerts.
• Prevent duplicate submissions, fraud, abuse, unauthorized access, and service disruption.
• Diagnose problems, understand service performance, and improve EcommOS.
• Comply with applicable law, enforce our terms, and establish or defend legal claims.

Where applicable, we rely on performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, or consent. Merchants are responsible for establishing an appropriate basis for the customer and lead information they place in EcommOS.

When a merchant authorizes a TikTok integration, EcommOS receives only the information needed to provide the connection. This may include information submitted through that merchant's TikTok Instant Forms together with related advertiser, form, campaign, ad, and lead identifiers. We use that information to create and manage the merchant's customer and order records, prevent duplicates, troubleshoot deliveries, and provide attribution requested by the merchant.

EcommOS does not sell TikTok lead data or use it to advertise unrelated products. Access is limited to the merchant organization that connected the account and authorized EcommOS personnel or service providers who need access to operate and secure the service. TikTok separately processes information under its own policies and terms.

• A merchant must explicitly authorize EcommOS through TikTok before we access its advertiser, form, or lead information.
• Connected-account credentials are encrypted at rest, exchanged server-to-server, and are not exposed to the browser after authorization.
• Duplicate-delivery controls use external lead identifiers so a retried event does not create multiple orders.
• Merchants can disconnect TikTok, revoke authorization, and request deletion of imported TikTok data using the controls and instructions described on our data deletion page.
• We do not access or use an advertiser's TikTok data after its authorization is revoked, except for limited records we must retain for security or legal compliance.

We may disclose information to:

• Authorized members of the relevant merchant organization, according to their roles and scopes.
• Hosting, database, email, notification, analytics, security, and customer-support providers that process information for us under contractual restrictions.
• Connected services when an authorized user asks EcommOS to send data or perform an action.
• Professional advisers, regulators, courts, law enforcement, or other parties when reasonably necessary to comply with law or protect rights and safety.
• A buyer or successor in a merger, financing, reorganization, or sale, subject to appropriate confidentiality and data-protection safeguards.

We do not sell personal information.

EcommOS and its service providers may process information in countries other than the country where it was collected. Where required, we use contractual and organizational safeguards intended to protect information transferred across borders.

We retain account and service information while an account is active and for as long as reasonably needed to provide the service, resolve disputes, enforce agreements, maintain security and audit records, and satisfy legal, tax, accounting, or regulatory obligations. Retention periods vary by the type of record and the merchant's instructions.

When information is deleted from active systems, limited copies may remain temporarily in protected backups or logs until they are overwritten under our normal retention cycle. We may retain de-identified information that can no longer reasonably identify a person.

Connected-account credentials are deleted or rendered unusable when the connection is revoked. Raw integration delivery payloads are retained only for the limited period needed to process, secure, deduplicate, and troubleshoot a delivery. Imported customer and order records follow the merchant's EcommOS retention and deletion instructions rather than the source platform's retention period.

We use administrative, technical, and organizational measures designed to protect information, including access controls, organization-level separation, authentication, encryption in transit, encryption of connected-service credentials at rest, monitoring, audit and delivery records, and restricted production access. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. You may also have the right to complain to a data-protection authority, including the Nigeria Data Protection Commission.

If your information was collected by a merchant using EcommOS, contact that merchant first. EcommOS will assist the merchant with verified requests as required. Account holders and other individuals may follow our data deletion instructions or email hello@ecommos.co.

We aim to acknowledge verified privacy requests within seven days and complete them within 30 days, unless applicable law permits or requires a different period. We will explain any lawful limitation or necessary extension.

EcommOS uses cookies or similar browser storage that are necessary for authentication, security, preferences, and application functionality. We may also use limited analytics to understand aggregate website and product usage. Where applicable law requires consent for non-essential technologies, we will request it before using them.

EcommOS is a business service and is not directed to children. Merchants must not use EcommOS or connected lead forms to collect children's information in violation of applicable law or platform rules.

We may update this policy as EcommOS, our integrations, or legal requirements change. We will post the current version here and update the date above. Material changes may also be communicated through the service or by email.

Questions or privacy requests may be sent to Applied Significance Technologies Limited at hello@ecommos.co. Additional contact options are available on our contact page.