Privacy Policy

Effective date: January 1, 2025 · Last updated: May 8, 2026

Ecomra ("we", "our", "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

We collect information you provide directly:

Account information: your name, email address, and organization name when you sign up.
Business data: product listings, SKUs, sales data, and channel credentials you connect to Ecomra.
Usage data: pages visited, features used, and IP address for security and analytics.

2. How We Use Your Information

To provide, operate, and improve the Ecomra platform.
To send transactional emails (account verification, password reset, audit summaries).
To detect and prevent fraud, abuse, and security incidents.
To comply with legal obligations.

We do not sell your personal data to third parties.

3. Data Sharing

We share data only with:

Service providers (e.g. hosting, email delivery) under strict data processing agreements.
Third-party channels you explicitly authorise (e.g. Amazon SP-API, Walmart Marketplace) to fetch or push your listing data.
Law enforcement when required by applicable law.

4. Data Retention

We retain your account data for as long as your account is active. You may request deletion at any time by emailing privacy@ecomra.ai. Deleted accounts are purged within 30 days.

5. Security

We use industry-standard security measures: PBKDF2-SHA256 password hashing, HTTPS/TLS encryption in transit, and least-privilege access controls. No system is 100% secure; please use a strong, unique password.

6. Cookies & Consent

Ecomra uses a small number of cookies and browser storage. Our full Cookie Policy lists every cookie by category, purpose, and lifetime. A summary:

Strictly necessary — ecomra_session (keeps you signed in) and ecomra_csrf (CSRF protection). These are always active and cannot be disabled. No consent is required under GDPR Article 6(1)(f).
Analytics — Anonymous usage signals to improve the platform. Only activated with your consent.
Marketing — Ad-attribution pixels (Meta, LinkedIn). Only activated with your consent.

We honour the Global Privacy Control (GPC) browser signal automatically — if detected, all optional cookies are declined without requiring any action from you. You can review or update your choices at any time via Settings → Privacy & Cookies inside the app, or from the Cookie Policy page.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, restrict processing, or data portability. To exercise these rights, contact privacy@ecomra.ai.

8. Children

Ecomra is not directed at children under 16. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or an in-app notice. Continued use after changes constitutes acceptance.

10. Contact

Questions? Email privacy@ecomra.ai.