Privacy policy

Version 0.9-beta · valid from 22-10-2026 · StoreBon

In short. This is what we ourselves keep about you if you have an account with StoreBOS or log in. We ask for no more than we need, we sell nothing on, and we pass nothing to Google when you log in with Google.

Which data this covers

StoreBon is the controller for your data as a user of StoreBOS: the data listed below. If you set up a website or webshop through StoreBOS, the data of your customers and visitors is yours. We only process it for you, as processor, and the data processing agreement applies to that. So that is a different story from this page.

What we keep

What	Why
Your name, email address and preferences	to make your account work and to be able to reach you
Your password, only as a protected derivative (a hash); we cannot read it ourselves	to let you log in
The login trail: time, whether it succeeded, how you logged in (password or Google) and from which IP address; that address is stored encrypted	to notice misuse of your account and to be able to check what happened

Logging in with Google

Logging in with Google is coming; this section applies once it is available. If you then choose Log in with Google, we ask Google only for openid email profile. From that we receive a fixed Google ID, your email address, whether Google has verified that address, and your name. We keep the link between that Google ID and your StoreBOS account, with the email address and the time of linking. We pass nothing about you to Google; Google only sees that you are logging in to StoreBOS. If you want to get rid of the link, ask for deletion (see below) and log in with your password from then on.

How long we keep it

We keep your account data for as long as your account exists. We keep the login trail for 18 months.

Where it is stored and who helps us

The servers are with Google Cloud in the Netherlands (region europe-west4); the email we send goes through Google Workspace. Once our customer chat is available and you talk to it, a language model answers your question; you are then talking to an AI and not to a human, and we also tell you so in the chat itself. That model runs at Google Vertex AI in Europe (appendix IV). Your message only goes to the model after we have removed your email address, phone number and other identifiable data from it. Who exactly those parties are and where, is listed in appendix IV of the data processing agreement; we keep that up to date there, and we do not repeat it here.

Your rights

You may ask us for:

access to what we keep about you;
correction if something is wrong;
deletion of your data;
to stop a processing you object to.