Privacy

Privacy Policy

Last updated: November 6, 2026

Store Console ("we", "us") is a trading name of MD Anichur Rahaman, a sole proprietor based at House 32, Road 29, Mirpur 12, Dhaka 1216, Bangladesh. We are the controller of the personal data described here. This policy explains what we collect when you visit storeconsole.com, buy a plan or contact us, why we collect it, who we share it with and the choices you have.

1. Who this policy covers

Visitors to storeconsole.com and its subdomains, including the live demo.
Customers who buy a Store Console plan or license, and anyone who contacts us.

It does not cover the data inside your own Store Console installation. You run that software on your own server, you decide what it stores, and we have no access to it. If you shop at a store that runs Store Console, that store's privacy policy applies to your data.

2. Information we collect

Information you give us

Account details: your name, email address, password (stored only as a secure hash), company and country.
Billing details we need to manage your plan. You enter card details on the secure checkout of Paddle, our Merchant of Record; we never see or store your full card number.
Messages you send to sales or support, through the contact form, live chat or email, and anything you include in them.
Your email address if you subscribe to our newsletter.

Information collected automatically

Device and browser type, IP address, the pages you visit, the site that referred you, and an approximate location based on your IP address.
Campaign details in the link you followed, such as utm tags or an ad click ID.
Cookies and similar technologies, described in our Cookie Policy.

Information from your installation

When your installation checks its license (at least once a day), it sends the license key, your domain, the software version, a random installation identifier, short fingerprints of its license files, the PHP version and the time you accepted our terms. We also see the IP address the check comes from. It never sends your store's customers, orders, products or other business data.
When you ask for help, we see only what you choose to share with us.

3. How we use your information

To run and secure the website, your account, your licenses, downloads and updates.
To process orders and send receipts, license emails and service messages.
To answer questions and provide support, including free installation when you ask for it. If you give our team access to your server for an installation, we use that access only for the job you asked for, and you can remove it as soon as we finish.
To understand how the website is used and to measure and improve our advertising.
To send product news and offers, with your consent where the law requires it. Every email has an unsubscribe link.
To prevent fraud and abuse, and to meet our legal obligations.

4. Legal bases (EEA and UK)

Where the EU or UK GDPR applies, we rely on: performance of a contract (your account, orders and support); our legitimate interests (running, securing and improving the website); your consent (marketing emails and non-essential cookies); and legal obligations (tax, accounting and fraud prevention). We check licenses and protect our software against unlicensed or modified copies on the basis of performance of a contract and our legitimate interest in protecting our software.

5. Advertising and measurement

We use Google Analytics to understand how visitors use the website, and the Meta Pixel and Google Ads, through Google Analytics, to measure our ads and show them to people who may be interested. These tools record events such as page views, product views, checkouts started, purchases and contact-form submissions.

Our server also sends the same events directly to Meta (Conversions API) and Google Analytics. Before anything leaves our server, your email address, phone number, name and address details are converted into a one-way SHA-256 hash. Your IP address, browser details and the Meta click and browser identifiers are sent as they are, because Meta needs them to match the event.

In the EEA, the UK, Switzerland, Brazil, Canada, South Korea, Japan, Thailand and South Africa, and whenever your browser sends a Global Privacy Control signal, these tools run only after you accept cookies in our banner. You can also limit ads in your Meta ad preferences and in Google My Ad Center.

6. AI features on our website

Our chat assistant and the "Ask AI about this product" feature send the questions you type to an AI provider so that it can write an answer. Please do not share passwords, card numbers or other sensitive details in chat. We use these conversations only to answer you and to improve our support.

Paddle.com, our Merchant of Record, which processes payments, calculates and collects tax, issues invoices, screens for fraud and handles refunds under its own privacy policy.
Hosting, content delivery and security providers, including Cloudflare, which keep the website fast and protected.
Email delivery providers, which send our account, order and support emails.
Google and Meta, for the measurement and advertising described in section 5.
AI providers, for the chat features described in section 6.
Professional advisers and authorities, when the law requires it or to protect our rights.
A buyer of our business, if it is ever sold, who must keep protecting your data under this policy.

Each provider may use your data only to provide its service to us. We never sell your personal information.

8. Google and YouTube data

Store Console's Social Hub can connect a YouTube channel through the YouTube API Services, so that an administrator can publish videos from the Store Console dashboard. By connecting a YouTube channel you agree to the YouTube Terms of Service. Google's use of your data is described in the Google Privacy Policy.

What we access: with the youtube.upload and youtube.force-ssl permissions you grant, we read the connected channel's name, ID, picture, subscriber and video counts and playlists, and we send the videos, titles, descriptions, tags, thumbnails, captions and playlist choices you publish.
How we use it: only to show which channel is connected and to carry out the uploads you start in Social Hub. We do not use Google user data for advertising, we do not sell it, and we do not use it to train AI models.
Storage: access and refresh tokens are stored encrypted in the Store Console installation that connected the channel. A published post keeps the YouTube video ID and link. Playlists are cached for at most 10 minutes, and channel details are refreshed whenever the connection is checked.
Sharing: Google user data is shared with no one other than Google, and only to perform the action you asked for, unless the law requires otherwise.
Revoking access: choose Disconnect in Social Hub → Connections, which revokes the token at Google and deletes it from the database, or remove Store Console in your Google account permissions. To ask us to delete any remaining data, email [email protected]; we delete it within 30 days.

Store Console's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

9. International transfers

We and our providers may process your data in countries other than your own. Where the law requires it, we use appropriate safeguards, such as the European Commission's Standard Contractual Clauses, for transfers outside the EEA or the UK.

10. How long we keep it

Account data, for as long as your account is open, and then up to 30 days after you ask us to delete it.
Invoices, payments and refund records, for as long as tax and accounting law requires, typically five to seven years depending on the country.
Support and sales messages, for as long as we need them to help you, after which we delete or anonymize them.
License-check records of an installation, up to 365 days after its last check.

11. How we protect it

We use encrypted connections, access controls, encrypted credentials and regular backups to protect personal data. No system is perfectly secure, so if we ever learn of a breach that affects you, we will tell you and the relevant authorities as the law requires.

12. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your data, to restrict or object to how we use it, and to withdraw consent at any time. Residents of the EEA and the UK may also complain to their data protection authority.

California residents may ask what we collect, ask us to delete it and opt out of the "sharing" of personal information for cross-context behavioral advertising, which you can do by refusing cookies in our banner. We do not sell personal information, and we will never treat you differently for using these rights.

To use any of these rights, email [email protected] or follow the steps in our User Data Deletion Policy. We reply within 30 days.

13. Children

Our website and services are for businesses. We do not knowingly collect data from children under 16, and we delete it if we learn that we have.

14. Changes to this policy

We may update this policy as our services or the law change. We will post every update here with a new date, and we will tell you by email about any change that significantly affects you.

15. Contact us

Privacy and legal: [email protected]
Phone: +880 1305 256527 (Sunday to Thursday, 10:00 to 18:00, GMT+6)
Post: House 32, Road 29, Mirpur 12, Dhaka 1216, Bangladesh