This Privacy Policy describes how Sh ("we", "us", or "our") collects, uses, and shares information about you when you use our platform (the "Service").

We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable laws.

Account data: name, email address, password (hashed), company details, role.

Usage data: pages visited, features used, actions performed, timestamps, IP address, browser and device information.

Integration data: tokens and metadata required to connect third-party services such as Allegro, Amazon, and Stripe.

Billing data: information required to process payments, handled by our payment processor (Stripe). We do not store full payment card numbers.

To provide, maintain, and improve the Service.

To authenticate you, secure your account, and prevent fraud.

To process transactions and send transactional emails (invoices, receipts, security alerts).

To communicate with you about product updates, service changes, and (with your consent) marketing information.

To comply with legal obligations and enforce our Terms.

We process your personal data on one or more of the following legal bases: performance of a contract, your consent, our legitimate interests, and compliance with a legal obligation.

We do not sell your personal data. We share data only with: service providers (hosting, analytics, email, payments) acting on our behalf; third-party platforms you choose to integrate; and authorities where required by law.

All processors are bound by data-processing agreements ensuring an adequate level of protection.

If you sign in with Google, we receive your email address, profile name, and a Google user identifier. We use this information solely to create or authenticate your account.

We do not receive or store your Google password, and we do not access any Google services on your behalf beyond the scopes you explicitly grant.

We use essential cookies to keep you signed in and to remember your preferences. With your consent, we may also use analytics cookies to understand how the Service is used.

You can manage your cookie preferences in your browser settings at any time.

We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion, we may retain data as required to comply with legal obligations, resolve disputes, and enforce our agreements.

You have the right to access, rectify, delete, restrict, or object to the processing of your personal data, and the right to data portability. Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, contact us at privacy@sh-online.eu. You also have the right to lodge a complaint with a supervisory authority.

We use industry-standard technical and organizational measures to protect your data, including encryption in transit, hashed password storage, regular backups, and access controls.

We may update this Privacy Policy from time to time. The most current version will always be available on this page. Material changes will be communicated to you via email or an in-app notice.

If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@sh-online.eu.