Privacy Policy

Last updated: 24 August 2026

StoreIQ ("we", "us") is a multi-store e-commerce dashboard operated by Waveit (contact: [email protected], Romania). This policy explains what data we process when you use the StoreIQ app (web, iOS, Android) and the storeiq.ro website, and what rights you have under the EU General Data Protection Regulation (GDPR).

Data we collect

Account data — your name, email address and a cryptographically hashed password, provided when you register.
Store connections — API credentials for the Shopify / WooCommerce stores you connect. They are encrypted at rest (AES-256-GCM) and are used exclusively to fetch your stores' data on your behalf. They are never shown to anyone, including you, after entry.
Business data — orders, products, customers and coupons of the stores you connect, synchronized so the app can show your sales analytics. This may include your customers' names and email addresses, which you remain the data controller of; StoreIQ processes them on your instructions as a processor.
Device data — a push-notification token if you enable notifications, and standard technical logs (IP address, timestamps) kept for security and debugging.
Billing data — if you purchase a subscription, payment is handled by Stripe; we store your plan and invoice history, never your card number.

Why we process it

To provide the service you signed up for (contract, Art. 6(1)(b) GDPR): showing dashboards, analytics, exports and notifications for your stores.
To secure the service (legitimate interest, Art. 6(1)(f)): authentication, abuse prevention, technical logs.
To bill subscriptions (contract and legal obligation).

We do not sell personal data, we do not use it for advertising, and we do not track you across other apps or websites.

Where it lives

Data is stored on servers in the European Union (AWS, Frankfurt region), behind Cloudflare. Sub-processors: Amazon Web Services (hosting), Cloudflare (network security), Stripe (payments), Google Firebase (push notification delivery only), frankfurter.app (currency exchange rates — receives no personal data).

Retention and deletion

Your data is kept while your account is active. You can delete your account at any time from Account → Delete account inside the app; this permanently removes your account, connected store credentials and synchronized business data. Backups roll off within 30 days. You may also request deletion by emailing [email protected].

Your rights

Under the GDPR you can request access, correction, deletion, restriction, portability of your data, or object to processing — email [email protected] and we will respond within 30 days. You can also lodge a complaint with your supervisory authority (in Romania: ANSPDCP, dataprotection.ro).

Children

StoreIQ is a business tool and is not directed at children under 16.

Changes

If we change this policy we will update this page and, for material changes, notify you in the app.