Privacy Policy

1. Information we collect

We collect four kinds of information.

• Account information. Your name, email address, password credentials, shop name, and subscription tier. You give us this when you sign up.
• Business data you enter or upload.Your customers' names, email addresses, phone numbers, and mailing addresses; orders, quotes, line items, notes, and file attachments; product catalog and supplier information; and shipment records.
• Data from accounts you connect. If you connect a third-party account, we retrieve data from it on your behalf. See section 3.
• Billing information. Subscription status and payment history. Card numbers are handled by Stripe and never reach our servers.

2. How we use information

We use your information to operate the platform for you: to display and manage your orders, customers, quotes, and catalog; to sync data with services you connect; to send messages you initiate; to process your subscription; and to provide support. We do not sell your information, and we do not use your business data or your customers' data to train machine learning models.

3. Connected accounts

AJ-Hub only accesses a third-party account after you explicitly connect it, and only for the purposes below. You can disconnect any of them at any time from Dashboard → Integrations.

• QuickBooks Online (Intuit). We read customers, invoices, and estimates from your QuickBooks company in order to import your order history, match QuickBooks customers to AJ-Hub customers, and keep order records in sync. We may create or update invoices and estimates when you ask us to. We store the resulting records (customer details, invoice and estimate data, and the identifiers needed to link them) in your AJ-Hub account. Access tokens are held by our integration provider, not in our database. When you disconnect QuickBooks, we delete the connection and revoke our access immediately.
• Zoho Books. Same purposes as QuickBooks, for shops that use Zoho instead.
• Gmail. Used to send email you compose or trigger from AJ-Hub, from your own address.
• Twilio. Used to send SMS you compose or trigger. You supply your own Twilio credentials and phone number.
• Shippo. Used to purchase shipping labels and track shipments.

4. Service providers

We share information with the following providers strictly so they can perform services for us. Each is bound by its own agreement with us.

• Supabase — database, authentication, and file storage.
• Vercel — application hosting.
• Stripe — subscription billing and payment processing.
• Composio — the integration layer that holds credentials for, and brokers requests to, the connected accounts listed in section 3.
• Anthropic— when you use the invoice-parsing feature, the document you upload is sent to Anthropic's API to extract order details. Anthropic does not train models on this data.
• Intuit, Zoho, Google, Twilio, and Shippo — the providers of the accounts you choose to connect.

We may also disclose information if required by law, or in connection with a merger or acquisition, in which case we will notify you.

5. Data retention and deletion

We keep your business data for as long as your account is active. Disconnecting an integration deletes that connection and its stored credentials right away; data already imported into AJ-Hub remains in your account so your order history stays intact, and you can delete those records yourself. If you close your account, we delete your data within 30 days, except where we are required to retain records (for example, billing records for tax purposes). To request deletion, email us at the address below.

6. Security

Data is encrypted in transit and at rest. Access to your shop's data is enforced at the database level, so one shop's records are not reachable from another's. Credentials for connected accounts are held by our integration provider rather than stored in our own database. Webhook notifications from third parties are cryptographically verified before we act on them. No system is perfectly secure, and we cannot guarantee absolute security.

7. Your rights

You can access, correct, export, or delete your information from within AJ-Hub, or by contacting us. Depending on where you live, you may have additional rights to request a copy of your data, object to certain processing, or lodge a complaint with a supervisory authority. We will not discriminate against you for exercising these rights.

8. Your customers' information

Much of the data in AJ-Hub concerns your customers rather than you. For that information you are the controller and we are the processor: we handle it on your instructions and for no other purpose. You are responsible for having a lawful basis to collect and store it, and for responding to your customers' requests about it. We will help you do so.

9. Children

AJ-Hub is a business tool and is not directed to anyone under 18. We do not knowingly collect information from children.

10. Changes

If we make a material change to this policy, we will update the date above and notify account holders by email before the change takes effect.

11. Contact

Questions, requests, or complaints: mike@awardjunkies.com.