Privacy Policy

1. Data Controller

The controller responsible for data processing on this platform is:
Jamal Jawando (Freelancer / iceeweb technologies LLC)
E-mail: info@iceeweb.online

2. Categories of Collected and Processed Data

• Authentication data: E-mail addresses and cryptographically Scrypt-hashed passwords for user account management and session security. (Legal basis: Art. 6(1)(b) GDPR).
• E-Commerce & logistics data (orders & SKUs): When external channels are connected, we process product metadata (SKUs, stock levels, variants) and transactional streams for automated inventory management. (Legal basis: Art. 6(1)(b) GDPR via data processing agreement).
• Encrypted third-party credentials: API tokens, webhook secrets and private shop keys. These keys are stored encrypted at rest. (Legal basis: Art. 6(1)(b) GDPR).
• Network telemetry & security logs: IP addresses and timestamps processed by our in-memory firewalls to defend against brute-force attacks. (Legal basis: Art. 6(1)(f) GDPR).

3. Storage Location & EU Serverless Infrastructure

All synchronized data points and system states are stored by default in a dedicated, isolated MongoDB cluster within the European Union (EU). Data transfers to unsafe third countries without an adequacy decision do not take place.

4. Bring-Your-Own-Database (BYODB) Option

Customers have the explicit architectural option to connect their own native MongoDB cluster via a private connection string. In this case, all transaction data, customer profiles and inventory movements remain entirely within the sovereignty of your own data infrastructure.

5. Your Rights under the GDPR

You have the right at any time to:

• Access your data stored with us (Art. 15 GDPR)
• Rectification of inaccurate personal data (Art. 16 GDPR)
• Erasure of your data stored with us (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection to processing (Art. 21 GDPR)

To exercise your rights, simply send an e-mail to info@iceeweb.online.