Privacy Policy

This Privacy Policy explains what information we collect from our users ("merchants"), why we need it, who we share it with and how we protect it. It applies to the Exhibe web application, to the mobile applications for iOS and Android, and to the public storefronts published with the platform. By using Exhibe, you accept the practices described here.

The data controller is Ozer Tech Solutions LLC (Wyoming, USA) and its local subsidiary being incorporated in the Republic of Honduras.

2.1. Your data as a merchant: with respect to your account, your business and your use of the platform, Exhibe acts as the controller.

2.2. Your customers’ data: with respect to information about buyers that you upload or receive through Exhibe (name, phone, email, delivery address, order history), you are the controller and Exhibe acts solely as processor: we process it following your instructions, in order to provide you the service, and we do not use it for our own purposes or commercialize it. You are responsible for informing your customers and for having a legal basis to process their data.

Privacy contact: legal@ozertechsolutions.com.

3.1. Profile and account: name, profile photo (optional) and email address. Your password is stored encrypted and hashed; nobody at Exhibe can read it.

3.2. Sign in with Google: if you choose that method, we receive your name, email and profile photo.

3.3. Sign in with Apple: if you choose that method, we receive your name and your email. If you turn on the option to hide your email, Apple gives us a private relay address (privaterelay.appleid.com) and we never see your real email.

3.4. Payment information: subscriptions and credit packs are processed with Apple when you buy inside the iOS application, and with Stripe when you buy from the web. Exhibe does NOT store or have access to your card details in either case; that information is handled by Apple and Stripe. We only keep purchase identifiers, the plan and its status.

3.5. Your business content: business name, logo, description, category, hours, contact details, products, photos, prices, stock, variants, coupons and your storefront configuration.

3.6. Your customers’ data: buyers’ name, phone, email and delivery address, along with their orders, quotes and layaways. Handled as described in section 2.2.

3.7. Operational records: orders, sales, inventory movements, point-of-sale shifts and cash counts, subscription events and AI credit usage.

3.8. Location (only if you turn it on): if you use live delivery tracking, the mobile application accesses the device location only while the app is in use and only during the delivery. That location is shared with whoever holds the tracking link for that order, for the sole purpose of letting the buyer follow their delivery, and tracking closes automatically when the order is marked as delivered or cancelled. We do not collect background location and we do not build movement histories.

3.9. Camera: used, with your permission, to take product photos and to scan barcodes. Barcode images are processed on the device; photos you choose to save are stored as your business content.

3.10. Push notifications: if you turn them on, we store a device identifier (token) so we can notify you about orders and events in your business.

3.11. Biometrics: if you turn on fingerprint or face unlock, verification happens entirely on your device, through the operating system. Exhibe never receives, transmits or stores biometric data.

3.12. Interactions with artificial intelligence features: the messages you send to the assistants, the photos you upload to the product assistant, and the catalog data needed to answer you. See section 4.

3.13. Technical data: IP address, device type, operating system, browser and usage logs, including security logs and rate limits to prevent abuse.

3.14. Cookies: we use first-party cookies to keep you signed in and to remember preferences.

Exhibe includes AI-assisted features: the merchant assistant, the shopping assistant on your storefront, creating products from a photo, marketing content generation and smart catalog search.

4.1. What is sent: to produce an answer, we send our AI providers only what is necessary: the text of the query, the corresponding photo, and the catalog or business data that gives the answer context.

4.2. How it is used: providers process that information only to generate the requested answer. Exhibe does not use your content to train its own models.

4.3. Limits: AI-generated output may contain errors or omissions. It is a help, not professional advice: always review the content before publishing it or using it with your customers.

Exhibe does NOT sell your personal data. We share information only with the providers needed to operate the service, who act as processors and are required to protect the data:

a) Infrastructure and database: Supabase (database, authentication and functions) and Vercel (hosting for the web applications).

b) Images: Cloudinary (storage and optimization of product photos, logos and payment receipts).

c) Payments: Apple (purchases made inside the iOS application) and Stripe (subscriptions, credit purchases and the billing portal on the web).

d) Transactional email: SendGrid (Twilio), for account confirmations, recovery codes and service notices.

e) Artificial intelligence: Claude models, by Anthropic, through an AI gateway; Google Cloud Vision to analyze product photos; and Google Programmable Search when the assistant needs to look up public information on the web.

f) Identity providers: Google and Apple, only if you choose to sign in with them.

g) Authorities: where required by law or to protect rights, people’s safety or the integrity of the platform.

Public content: what you publish on your storefront (business, products, prices, photos) is, by its nature, visible to anyone with the link.

a) Contractual necessity: creating and maintaining your account, publishing your storefront, managing orders and charging your subscription.

b) Legitimate interest: maintaining security, preventing fraud and abuse, and improving the performance of the service.

c) Consent: device permissions (location, camera, notifications), which you can grant or revoke at any time from your system settings.

d) Legal compliance: keeping accounting and tax records required by applicable regulations.

We keep data while your account is active and for as long as necessary to meet legal obligations. When you delete your account, section 8 applies.

We apply technical and organizational measures: encryption in transit and at rest, strict per-merchant isolation through row level security (RLS), restricted access controls, rate limits and audit logging of administrative actions.

You can delete your account yourself, without asking for authorization or writing to anyone, from Settings → Security → Delete account, both in the web application and in the iOS and Android applications.

8.1. What happens when you delete it: we permanently erase your business and all its associated data: products, photos, orders, sales, customers, quotes, layaways, inventory, coupons, point-of-sale records, your storefront configuration and your login user. Your public storefront stops being available. If your subscription was purchased on the web, we also cancel it so no future charges are generated; if it was purchased in the iOS application, you have to cancel it yourself in your iPhone Settings → your name → Subscriptions, because only Apple can do it.

8.2. It is permanent: deletion cannot be undone and we do not keep copies recoverable by the user. If you want to keep your information, download it before deleting the account.

8.3. What is retained and why: Apple and Stripe keep records of transactions and invoices already made for the period required by accounting and tax regulations. We may also keep minimal technical and security logs, with no content from your business, for the time strictly necessary to prevent fraud and comply with the law. Encrypted backups are overwritten on their usual cycles.

8.4. Your customers’ data: deleting your account also erases from our systems the buyer data associated with your business.

You may exercise, at any time, the rights of access, rectification, erasure (right to be forgotten), portability, restriction and objection to processing.

You can exercise most of them directly from the platform: edit your profile and your business, correct or delete products and customers, and delete your entire account from Settings → Security. For any other request, write to us at legal@ozertechsolutions.com and we will respond within the timeframes set by applicable law.

We use first-party, strictly necessary cookies to keep you signed in and to remember interface preferences. We do not use advertising cookies and we do not sell data to ad networks. You can manage them from your browser settings, bearing in mind that blocking session cookies will prevent you from signing in.

We operate on global infrastructure, so your data may be stored and processed outside your country, mainly in the United States. We select providers that offer adequate guarantees of security and confidentiality, through contractual clauses and data protection commitments.

Exhibe is a tool for businesses and is intended for people over 18. We do not knowingly collect information from minors. If we detect an account created by a minor, we will delete it along with its data.

We may update this policy to reflect changes in the service or in regulations. The version in force is always published with its effective date, and we will notify significant changes through the platform or by email.

This document is an English translation provided for convenience. The Spanish version is the binding one: in the event of any discrepancy or difference in interpretation between the two, the Spanish text prevails.