Introduction

This Privacy Policy ("Policy") outlines the practices of Vionix ("Company", "we", "us", or "our") regarding the collection, use, maintenance, and disclosure of information collected from users ("User", "you", or "your") of the CommerCentric platform. CommerCentric is a Software as a Service (SaaS) e-commerce management platform designed to streamline various functions such as warehouse management, inventory management, store management, and customer service into a unified, user-friendly system. This Policy is established to demonstrate our commitment to your privacy and to inform you of your rights and our practices concerning your personal information.

Information Collection Practices

Types of Information Collected:

We collect information through your interactions with our platform and through authorized connections to marketplace APIs. This includes Personally Identifiable Information (PII) necessary for managing order fulfillments, inventory, customer service, and other e-commerce management functions facilitated by CommerCentric.

Methods of Collection:

Your information is collected through direct interactions with our platform and the integration of marketplace APIs from platforms such as Shopify, Amazon, Walmart, among others.

Use of Information

The information we collect is utilized to:

Facilitate the comprehensive e-commerce management services provided by CommerCentric.
Enhance the functionality and user experience of our platform.
Communicate with you regarding updates, services, and support.

Data Sharing and Disclosure

External Shipping Providers:

For the purpose of order fulfillment, we may share necessary PII with external shipping providers, such as FedEx and Stamps.com, under strict conditions to ensure your data's security:
Disclosure of information is confined to what is strictly necessary for completing shipping services.
We transparently communicate the nature and extent of information shared with these providers.

Use of Mouseflow:

We utilize Mouseflow for session recording to improve our platform's features and debug issues. Mouseflow is configured to redact all PII, ensuring your privacy is maintained.

Information Protection

We employ advanced encryption and security measures to safeguard your information:
TLS protocols for data in transit and AES encryption for data at rest.
Rigorous access management controls are in place to restrict data access to authorized personnel only.

Data Retention and Recovery

Amazon PII is retained only as long as necessary for order fulfillment and is securely deleted within a 30-day timeframe post-fulfillment. All other personal information is managed in accordance with our data retention policy, designed to comply with legal obligations and operational requirements. Comprehensive data backup and recovery systems are in place to prevent data loss.

User Rights

In compliance with applicable data protection regulations, we specifically recognize the right of the store's superadmin role to request access to, correction of, deletion of, or limitations on the processing of Amazon-sourced Personally Identifiable Information (PII) of your customers that we process. This right is exclusively reserved for users with the superadmin role, ensuring a stringent and secure approach to managing Amazon PII in alignment with legal and operational standards.

For requests or privacy-related inquiries concerning Amazon PII, the superadmin should contact our support team.

Incident Response

We have established a detailed Incident Response Plan to manage potential data security incidents effectively. This includes prompt communication with affected individuals and regulatory bodies as required.

Consent and Policy Amendments

By using the CommerCentric platform, you acknowledge and consent to the practices described in this Policy. We reserve the right to amend this Policy, with any significant changes communicated through our platform or directly to you.