Privacy Policy

1. Overview

Storcea (“we”, “us”, or “our”) is a software-as-a-service platform that enables merchants to create online storefronts linked to WhatsApp and SMS. This Privacy Policy explains what personal data we collect, how we use it, who we share it with, and your rights in relation to it.

By using Storcea, you agree to the collection and use of information as described in this policy. We are committed to handling your data responsibly and in accordance with Ghana's Data Protection Act 2012 (Act 843).

2. Who This Policy Applies To

This policy applies to two groups of people:

• Merchants — individuals or businesses who create and manage a Storcea storefront.
• Customers — people who browse a merchant's storefront and place orders.

Merchants are responsible for how they handle their customers' data collected through their Storcea storefront. We encourage merchants to be transparent with their customers about how order information is used.

3. Data We Collect

From Merchants

• Account information: name, email address, and password (stored as a secure hash).
• Store information: store name, store URL (slug), WhatsApp number, and store settings.
• Product data: product names, descriptions, prices, images, and inventory details you upload to the platform.
• Billing information: subscription tier and billing history. Payment is made via Mobile Money transfer directly to Storcea's Mobile Money account. Payment screenshots uploaded as proof are stored securely and used only for subscription verification.
• Usage data: dashboard activity, feature usage, and session information.

From Customers

• Order information: customer name, phone number, delivery address, order details, and optional order notes (special instructions for the merchant) submitted when placing an order on a merchant's storefront.

Storcea does not require customers to create an account. When a merchant has Mobile Money checkout enabled, customers may upload a payment screenshot as proof of transfer. This image is stored securely in Supabase Storage and is accessible only to the merchant for order verification purposes. It is deleted automatically if the payment is rejected. We do not collect customer card or bank details.

4. How We Use Your Data

We use the data we collect to:

• Create and manage your Storcea account and storefront
• Process and verify subscription payments via Mobile Money
• Deliver order notifications to merchants (Pro plan)
• Provide AI-powered features such as the product description writer and shopping assistant (Pro plan)
• Display order and analytics data in your merchant dashboard
• Respond to support requests and account queries
• Improve and maintain the platform

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

5. Third-Party Services

We use the following third-party services to operate the platform. Each has its own privacy policy governing how they handle data.

• Supabase — database, authentication, and file storage. Merchant and order data is stored in Supabase-hosted PostgreSQL databases.
• Google — optional sign-in via Google OAuth. If you choose to sign in with Google, we receive your name and email address from Google to create or access your account. We do not receive your Google password.
• Mobile Money (MTN MoMo / Telecel Cash) — subscription payments are made directly via Mobile Money transfer to Storcea's account. Payment screenshot images are stored in Supabase Storage.
• Vercel — hosting and deployment of the Storcea web application.
• Anthropic — powers the AI product description writer (Starter and Pro) and AI shopping assistant (Pro). Product names and storefront data are sent to Anthropic's API to generate responses. No personal customer data is sent to Anthropic.
• Resend — transactional email delivery for order notifications and authentication emails.

6. Data Retention

We retain your account and store data for as long as your account remains active. If you request account deletion, we will permanently delete your data upon receiving and confirming your request. To request deletion, contact us at storcea.team@gmail.com.

Order data submitted by customers is retained as part of the merchant's store records. Merchants may contact us to request deletion of specific order records.

7. Data Security

We take reasonable technical measures to protect your data, including encrypted connections (HTTPS), secure password hashing, and access controls. However, no system is completely secure. We encourage merchants to use strong, unique passwords and to keep their account credentials confidential.

8. Your Rights

Under Ghana's Data Protection Act 2012, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request deletion of your personal data
• Object to how your data is being processed

To exercise any of these rights, contact us at storcea.team@gmail.com. We will respond within 5 business days.

9. Cookies

Storcea uses essential session cookies to keep you logged in to your account. We do not use advertising or tracking cookies. No third-party analytics scripts are loaded on the platform.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify merchants of material changes by email or via the dashboard. Continued use of Storcea after changes take effect constitutes your acceptance of the updated policy.

11. Contact

For any questions or concerns about this Privacy Policy or how we handle your data, please contact us at storcea.team@gmail.com.