Security and trust
Draft. Pending completion of the owner's details and legal review.
Clear information about protecting your data
ProfitRocket works with sales and cost information from the stores you connect. This page explains the scope of the verified measures, how to manage your connections and how to report an issue.
Access to your account and your stores
[DESCRIBE THE VERIFIED MECHANISMS FOR AUTHENTICATION, AUTHORISATION AND SEPARATION OF DATA BETWEEN ACCOUNTS AND STORES].
Only connect sources you administer or are authorised to use. Also protect the account of the provider you use to sign in. If you suspect someone has accessed your account without permission, report it through the channel below.
Technical and operational protection
| Area | Confirmed information about the service |
|---|---|
| Storage and credentials | [ACTUAL PROTECTION, WITHOUT PUBLISHING SECRETS OR DETAILS THAT WOULD FACILITATE ATTACKS]. |
| Support access | [WHEN IT MAY OCCUR, AUTHORISATION AND LOGGING]. |
| Backups and recovery | [VERIFIED SCOPE; STATE RELEVANT LIMITATIONS]. |
| Providers and location | [LINK TO THE VALIDATED LIST AND TRANSFERS, IF ANY]. |
The measures applicable to processing on behalf of customers are also described in the Data Processing Agreement. Contracted availability and support are governed by the terms and the specific conditions accepted.
Control over your connections
You can review your account's integrations and use their disconnection options [CONFIRM THE ACTUAL PATH]. Disconnecting a source stops future updates and is not the same as deleting all history. See the account deletion page to request the erasure that applies.
Reporting an issue or vulnerability
Write to [VERIFIED_SECURITY_EMAIL] with a description, approximate date and the minimum steps needed to understand the problem. Avoid including buyer data or credentials. If you need to send sensitive information, please request an appropriate channel first.
Do not access other people's accounts, extract information or disrupt the service to demonstrate a problem. Publishing this channel does not authorise intrusive testing or establish a bug bounty programme.
Documentation
- Privacy Policy: Privacy Policy.
- Data processing and sub-processors: Data Processing Agreement.
- Account deletion: Deleting your account and data.
- Terms of Service: Terms of Service.