Privacy Policy

1. Data We Collect

• Store data: We access your BigCommerce store resources (products, customers, orders, pages, themes, and other data types you select) solely to create backups on your behalf. This data is stored in your backup files and is not used for any other purpose.
• Account information: When you install the app via BigCommerce OAuth, we receive your BigCommerce user ID and email address to identify and authenticate your account.
• Store credentials: We store your store hash and API access token to authenticate requests to the BigCommerce API on your behalf. Access tokens are stored encrypted at rest.
• Usage and audit logs: We log backup and restore activity (timestamps, data types, status, initiating user, and IP address) for accountability and debugging purposes.

2. How We Use Your Data

• To create, store, and serve backups of your BigCommerce store data.
• To authenticate API requests to BigCommerce on your behalf.
• To provide restore functionality when you request it.
• To send backup status notifications (if you enable this feature).
• To investigate issues, monitor service health, and improve the Service.

We do not sell, rent, share, or otherwise disclose your store data or personal information to third parties for marketing, advertising, or any commercial purposes.

3. Data Storage and Security

Backup data is stored in DigitalOcean Spaces (S3-compatible object storage) with private access controls. All backup objects are stored with private ACL — no public URLs are issued. Browser downloads are served via pre-signed URLs with a 15-minute expiry.

Our servers and database are hosted on DigitalOcean infrastructure. We use industry-standard TLS encryption for all data in transit. Access tokens are encrypted at rest in our database.

We implement technical and organizational security measures designed to protect your data against unauthorized access, alteration, disclosure, or destruction. However, no transmission or storage system is 100% secure, and we cannot guarantee absolute security.

4. Data Retention

Backup files are retained according to your configured retention policy (default: 30 days). You may delete individual backups at any time from within the app.

If you uninstall the app from BigCommerce, your store credentials are deactivated. Existing backup data remains in storage unless you request deletion. To request complete deletion of all your data, contact us at admin@optimum7.com. We will process deletion requests within 30 days.

5. Third-Party Services

• BigCommerce: We communicate with the BigCommerce API to read and write store data as authorized by your OAuth installation. Subject to BigCommerce's Privacy Policy.
• DigitalOcean Spaces: Used for backup file storage. Data is stored in the configured region. Subject to DigitalOcean's Privacy Policy.

We do not integrate with payment processors or advertising networks. We do not use cookies for tracking or analytics purposes.

6. Your Rights

You may request access to, correction of, or deletion of any personal data we hold about you by contacting us at the address below. We will respond within 30 days. Depending on your jurisdiction, you may have additional rights under applicable privacy laws (such as GDPR or CCPA).

You may also request deletion of your account and all associated data at any time by contacting support. Backup files in storage will be removed within 30 days of account deletion.

7. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate the date of the most recent revision at the top of this page. We may also notify you of material changes by posting a notice within the app. Continued use of the Service after changes constitutes your acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: