Privacy Policy

1. What we collect

Account data (name, email), store data you create (products, orders, customers), and technical data needed to run and secure the service (logs, IP addresses).

Card numbers are never collected by Soooks — customers pay on your payment provider's hosted, PCI-compliant pages.

2. How we use data

To operate the platform, process orders, send the emails you configure, provide support, and keep the service secure. We do not sell personal data.

3. Your customers' data

Data about your customers belongs to your store and is processed to run it: orders, marketing consent, and segmentation. Marketing email respects the consent state your customers chose.

4. Connected Instagram accounts

When a merchant connects Instagram to show posts on their store, we keep the account's username and account type, an access token (encrypted at rest), and a copy of up to 24 recent posts (image links, captions and post links). We use them only to display those posts on that merchant's store, and refresh them about once a day. We never post, message or read anything else.

Disconnecting Instagram in the store admin deletes the token and the saved posts straight away. Removing the app from your Instagram settings, or asking Instagram to delete your data, does the same automatically, and you receive a confirmation code with a page showing the deletion is complete.

5. Retention

Placeholder: retention windows per data category to be finalized with counsel.

6. Security

Stores are isolated per tenant, access is role-based, sensitive settings are encrypted at rest, and traffic is encrypted in transit.

7. Your rights

You can access, correct or delete your account data. Placeholder: jurisdiction-specific rights language to be inserted by counsel.

8. Contact

Privacy questions reach us via the contact page and are answered by a human.