Privacy Policy

1. Data We Collect

• Store data: We access your BigCommerce store resources (products, customers, orders, pages, themes, and other data types you select) solely to create backups on your behalf.
• Account information: When you install the app via BigCommerce OAuth, we receive your BigCommerce user ID and email address.
• Store credentials: We store your store hash and API access token to authenticate requests to the BigCommerce API on your behalf.
• Usage and audit logs: We log backup and restore activity (timestamps, data types, status, initiating user) for accountability and debugging purposes.
• Billing information: Subscription payments are processed by Stripe. We do not store credit card numbers or full payment details.

2. How We Use Your Data

• To create, store, and serve backups of your BigCommerce store data.
• To authenticate API requests to BigCommerce on your behalf.
• To provide restore functionality when requested.
• To send backup status notifications (if enabled).
• To manage your subscription and process payments via Stripe.
• To investigate issues and improve the Service.

We do not sell, rent, or share your store data or personal information with third parties for marketing purposes.

3. Data Storage and Security

Backup data is stored in DigitalOcean Spaces (S3-compatible object storage) with private access controls. All backup objects are stored with private ACL — no public URLs are issued. Browser downloads are served via pre-signed URLs with a 15-minute expiry.

Our servers are hosted on DigitalOcean infrastructure. We use industry-standard encryption in transit (TLS) for all API and data transfer operations.

Access tokens are stored encrypted at rest in our database and are only used to communicate with the BigCommerce API on your behalf.

4. Data Retention

Backup files are retained according to your configured retention policy (default: 30 days). You may delete individual backups at any time from within the app.

If you uninstall the app from BigCommerce, your store credentials are deactivated. Existing backup data remains in storage and can be accessed if you reinstall. To request complete deletion of all your data, contact us at admin@optimum7.com.

5. Third-Party Services

• BigCommerce: We communicate with the BigCommerce API to read and write store data as authorized by your OAuth scopes.
• DigitalOcean Spaces: Used for backup file storage. Data is stored in the region you selected at setup.
• Stripe: Handles subscription billing. Subject to Stripe's Privacy Policy.

6. Your Rights

You may request access to, correction of, or deletion of any personal data we hold about you by contacting us at the address below. We will respond within 30 days.

You may also delete your account and associated data at any time by contacting support. Deleting your account will permanently remove your store credentials and backup metadata. Backup files in storage will be removed within 30 days of account deletion.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice within the app or by email. Continued use of the Service after changes constitutes your acceptance of the updated policy.

8. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: