Privacy Policy

    Last Updated: January 2026

    At CircaOS, we respect your privacy and are committed to protecting the data you share with us. This Privacy Policy explains how we collect, use, and safeguard information when you use our resale inventory and operations platform.

    1. Information We Collect

    We collect information to provide a better experience and improve our services:

    • Account Information: Name, email address, business name, and contact details provided during registration.
    • Business & Inventory Data: Information regarding your inventory, pricing, and sales history that you upload or sync to the platform.
    • Third-Party Integration Data: If you connect CircaOS to a third-party POS (e.g., Shopify, Square, Lightspeed), we may collect transaction data and product details necessary to sync your operations.
    • Usage Data: Technical information such as IP addresses, browser types, and how you interact with our platform to help us improve performance.

    2. How We Use Your Information

    We use the collected data for the following purposes:

    • Service Delivery: To manage your inventory, process identifications, and sync with your POS.
    • Account Management: To handle billing, provide customer support, and send platform updates.
    • Platform Improvement: To analyze usage trends and develop new features for the resale market.
    • Security: To detect and prevent fraudulent activity or unauthorized access.

    3. Data Sharing and Disclosure

    We do not sell your business or personal data to third parties. We only share information in the following circumstances:

    • Service Providers: With trusted vendors who assist in hosting, payment processing, or analytics (e.g., AWS, Stripe).
    • Third-Party Integrations: Data is shared with your connected POS systems as directed by your account settings.
    • Legal Compliance: If required by law, regulation, or legal process.

    4. Data Security

    We implement industry-standard security measures to protect your data. This includes encryption of data in transit and at rest. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

    5. Your Data Rights

    Depending on your jurisdiction (such as under GDPR or CCPA), you may have the right to:

    • Access and Export: Request a copy of the data we hold about your business.
    • Correction: Request updates to inaccurate or incomplete information.
    • Deletion: Request that we delete your personal or business data, subject to certain legal or contractual obligations.

    6. Data Retention

    We retain your information for as long as your account is active or as needed to provide you services. If you terminate your account, we may retain certain data as required by law or for legitimate business purposes (such as financial record-keeping).

    7. Changes to This Policy

    We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on our website and updating the "Last Updated" date.

    8. Contact Us

    If you have any questions about this Privacy Policy or our data practices, please contact us using the contact form found here.