Privacy Policy

1. Introduction

Welcome to Wizmart ("we," "our," "us"), a multi-channel commerce management SaaS platform (accessible at https://wizmart.co.uk/).

Wizmart empowers online merchants and business operators to manage products, catalog synchronization, and marketplace listings across connected sales channels from a centralized dashboard. We are committed to maintaining the privacy, security, and integrity of your business data and connected marketplace channels. This Privacy Policy details how we collect, process, store, and safeguard data when you access or use Wizmart.

2. Information We Collect

To deliver multi-channel listing management, product mapping, and channel synchronization, Wizmart collects specific categories of operational data:

3. Third-Party Account Authorization

Wizmart interacts with external sales platforms through explicit user authorization. When connecting a channel, you authorize Wizmart to request access tokens, perform authorized API operations, retrieve catalog data, and push product or inventory updates to your authorized channel account on your behalf.

4. How We Use Your Information

We process your information strictly for legitimate commercial and operational SaaS functions:

• Executing product catalog synchronization and publishing items across connected sales channels.
• Performing real-time or scheduled inventory quantity updates to prevent overselling.
• Validating channel health, API authorization status, and operational connection metrics.
• Maintaining product mappings and cross-channel SKU relationships.
• Detecting, preventing, and resolving technical errors or unauthorized platform access.
• Providing operational logs, sync failure diagnostics, and catalog summary reports.

5. eBay Information

When connecting an eBay marketplace channel:

• Wizmart processes eBay API OAuth authorization tokens, marketplace IDs (such as EBAY_US), currency configurations, and fulfillment, payment, and return policy IDs provided by the merchant.
• Catalog updates, pricing, and stock levels are submitted to eBay's Inventory and Listing APIs in compliance with eBay Developer API terms.
• Wizmart stores eBay seller profile URLs and configuration parameters securely scoped to your user account.

6. Shopify Information

When connecting a Shopify store channel:

• Shopify store connections are established via secure OAuth authorization flows initiated directly by an authenticated SaaS user.
• Wizmart normalizes store URLs to standard domain formats (e.g. your-store.myshopify.com) and securely exchanges authorization codes for API tokens.
• Wizmart interacts with Shopify Admin GraphQL APIs to import products, read/update inventory levels, and publish catalog modifications.
• Shopify access tokens and refresh tokens are stored securely in database credentials and are never exposed to frontend client applications or logged in system output.

7. Custom Website Integration

For merchants integrating a Custom Website channel via custom REST endpoints, Wizmart stores the configured target API Base URL and authentication API Keys. API Keys are transmitted securely via HTTP headers (such as X-API-Key or Bearer headers) exclusively to your designated custom endpoint during synchronization events.

8. Authentication and Access Tokens

Security of credentials is a core architectural priority in Wizmart:

• All channel access tokens, OAuth refresh tokens, and custom API keys are stored in encrypted backend infrastructure.
• Credentials fields are strictly excluded from client-facing API responses (via explicit projection exclusions).
• OAuth authorization state sessions are cryptographically generated and bound to initiating user accounts to prevent CSRF or cross-tenant session hijacking.

9. Information Sharing

• Connected Marketplaces: Product and inventory data is transmitted directly to external sales channels (Shopify, eBay, Custom Website) as explicitly instructed by your synchronization configuration.
• Service Infrastructure: Trusted cloud hosting, database, and Redis caching infrastructure providers operating under strict confidentiality and security obligations.
• Legal Compliance: When required by valid legal process, regulation, or enforceable governmental request.

10. Data Security

We employ industry-standard technical safeguards to protect your information, including TLS/HTTPS encryption in transit, strict user isolation database indexes, distributed locking mechanisms for token rotation, hashed password storage, and access token masking in application logs. While no transmission over the Internet is 100% immune to risk, we continuously audit our infrastructure to safeguard your account.

11. Data Retention

Wizmart retains account data, product mappings, and integration records for as long as your account remains active or as needed to provide multi-channel services. If you delete a product mapping or remove a connected sales channel, associated channel credential tokens and mappings are permanently removed from active server records.

12. Disconnecting an Integration

You can disconnect any sales channel at any time via the Integrations page in the Wizmart dashboard. Upon deletion of an integration, Wizmart immediately ceases background synchronization for that channel and removes stored access tokens for that specific integration.

13. Your Rights

Depending on your jurisdiction, you may hold the following rights regarding your personal and business data:

• The right to access and review data stored in your account.
• The right to correct or update inaccurate product or account information.
• The right to request deletion of your account and associated multi-channel records.
• The right to disconnect third-party marketplace channel authorizations at any time.

14. Cookies and Similar Technologies

Wizmart uses essential authentication tokens (such as JSON Web Tokens stored in browser secure storage) to maintain active user login sessions and authenticate API requests. We do not use third-party advertising cookies or cross-site tracking scripts.

15. Children's Privacy

Wizmart is a commercial B2B e-commerce software platform intended strictly for use by legal adults and business enterprises. We do not knowingly collect personal information from individuals under 18 years of age.

16. International Data Transfers

Your information may be transferred to and processed on secure server infrastructure located outside of your state, province, or country. Wizmart ensures that all data transfers adhere to appropriate technical safeguards and data protection protocols.

17. Third-Party Services

Wizmart interfaces with third-party platforms (Shopify, eBay). This Privacy Policy applies exclusively to Wizmart and Wizmart. We encourage you to review the privacy policies of any third-party marketplaces you connect to Wizmart.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect platform enhancements, legal requirements, or operational changes. Updated versions will be published on this page with a revised "Last Updated" date.

19. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or Wizmart data practices, please contact Wizmart: