Privacy

Privacy Policy

How we collect, use, and protect your personal data.

Last updated: July 26, 2026

1. Introduction

MyOrders ("we", "us", "our") is operated by UAB ELDORADO Belinvest. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the MyOrders platform (the "Service").

We are committed to complying with the General Data Protection Regulation (GDPR) and other applicable privacy regulations.

2. Data We Collect

  • Account data: name, email address, password (hashed), company details, role.
  • Usage data: pages visited, features used, actions performed, timestamps, IP address, browser and device information.
  • Integration data: tokens and metadata required to connect third-party services such as Allegro, Amazon, and Stripe.
  • Billing data: payment processing details handled by Stripe — we do not store full card numbers.

3. How We Use Your Data

  • Provide, maintain, and improve the Service.
  • Authenticate users and prevent fraud.
  • Process transactions and send transactional emails (invoices, receipts, security alerts).
  • Communicate about updates and marketing (with consent).
  • Comply with legal obligations.

4. Legal Basis for Processing

We process your personal data on the following legal bases: performance of a contract, your consent, our legitimate interests, and compliance with a legal obligation.

5. Sharing Your Data

We do not sell your personal data. Data sharing occurs only with:

  • Service providers (hosting, analytics, payment processing) under data-processing agreements.
  • Integrated platforms you select (e.g. Amazon, Allegro, Stripe).
  • Competent authorities where legally required.

6. Amazon Selling Partner Data

MyOrders integrates with the Amazon Selling Partner API (SP-API) to retrieve order and financial data on behalf of Amazon sellers who explicitly authorize our platform.

Data we access via Amazon SP-API

  • Order details: order IDs, purchase dates, order status, item names, quantities, prices.
  • Buyer information: buyer name, shipping address, email address (where provided by Amazon).
  • Financial data: payments, fees, refunds, and transaction records.
  • Tax invoices: VAT invoices generated by Amazon for orders on EU marketplaces.

How we access your Amazon data

We access Amazon data only through the official SP-API using OAuth 2.0 authorization. When you connect your Amazon account, you grant us a refresh token which is stored encrypted (AES-256) in our database and used solely to retrieve your data from Amazon. We never access your Amazon account credentials (username or password).

Data retention and deletion

Amazon seller data is retained for as long as your account is active. If you disconnect your Amazon account or delete your MyOrders account, all associated Amazon data including your refresh token will be permanently deleted within 30 days. Order and financial data may be retained longer where required by applicable tax and accounting regulations (up to 5 years under EU/Lithuanian law).

Sharing Amazon data with third parties

Amazon order and financial data, including invoices, may be shared with accounting firms or bookkeeping services only upon your explicit request and authorization. We do not share Amazon data with any third party without your direct instruction.

Compliance

Our use of Amazon SP-API data complies with Amazon's Acceptable Use Policy and Data Protection Policy. We do not use Amazon data for any purpose other than providing the MyOrders service to you.

7. Google Sign-In

When you sign in with Google, we receive your email address, profile name, and Google identifier for authentication purposes only. We do not receive or store your Google password.

8. Cookies

We use essential cookies to keep you signed in. Analytics cookies are used only with your consent. You may withdraw consent at any time via cookie settings.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion, data may be retained for a limited period as required by law, for dispute resolution, or to enforce our agreements.

10. Your Rights

Under GDPR, you have the right to access, rectify, delete, restrict, or object to the processing of your personal data. You also have the right to data portability.

To exercise any of these rights, contact us at privacy@myorders.pl. You may also lodge a complaint with your local data protection authority.

11. Security

We protect your data using encryption in transit (HTTPS/TLS), AES-256 encryption at rest, hashed password storage, regular backups, access controls, and periodic security audits.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us:

Step into the future of order management

Experience the cutting-edge solution that transforms how you handle your orders. Elevate your e-commerce business with our next-gen platform.