Privacy Policy

This policy covers the admin panel and the people who sign in to it. The store data you manage there — your customers, orders and so on — is handled on your organisation’s behalf and under its own privacy notices.

• Your account: name, email, and the details your administrator adds (such as phone and role).
• Sign-in and security: your password (stored only as a hash), your two-factor settings and passkeys, and for each signed-in device its browser, operating system, IP address, approximate location, sign-in time and last activity — so you can see and end your sessions.
• What you do in the admin: the records you create and change, a history of those changes, and actions on connected services (such as deploys).
• Files you upload: images and files, kept in cloud storage.
• Issues you report: the title, description and screenshots you send.

• to sign you in, keep your account secure and show you your signed-in devices;
• to run the admin — showing, saving and exporting your organisation’s data;
• to send the emails you ask for or need, such as sign-in codes and assignment notices;
• to fix problems you report and keep the service reliable.

We don’t sell your data or use it for advertising.

The admin keeps a few things in your browser’s local storage: your sign-in token, your colour theme, and preferences like which sidebar sections are folded. They’re needed for the admin to work. There are no advertising or third-party tracking cookies.

Only the service providers the admin runs on, each for its own part:

• hosting and database providers, which store the admin’s data;
• cloud storage, for uploaded files;
• an email provider, for the emails above;
• an AI provider, only when you use an AI feature (such as “Build with AI”) — the description you type and the relevant model settings are sent to it.

We may also share data where the law requires it.

Account data is kept while your account exists. Signed-out sessions are kept for a while as a security record. Records and files stay until they’re deleted by someone with permission to; a deleted record can be restored for 30 days, then it’s gone.

Passwords are hashed; two-factor sign-in, passkeys and signing out other devices are available to every user; and access to each part of the admin is limited by role. No system is perfectly secure — if you notice something wrong, report it straight away.

• See and end your signed-in sessions, and manage two-factor sign-in, in Settings → Sign-in & security.
• Ask your administrator to correct your details, or to remove your account.
• Depending on where you live, you may have further rights over your data; ask us to use them.

We’ll update this page when what we collect or how we use it changes; the date at the top shows the latest version.

Questions or requests about your data: report an issue or contact your organisation’s administrator. See also the Terms of Use.