Kaizen Aqua processes the data required for registration, OAuth sign-in, order placement and delivery, customer support, abuse prevention, and compliance with legal obligations.
Passwords, access tokens, OAuth client secrets, and full payment details are not written to application logs. Payment data is processed by the payment provider.
Data is used only for the stated store functions and is retained no longer than required by contractual, tax, payment, and other legal obligations. Employee access is role-restricted.
Users may request access to, correction of, or deletion of their data when retaining it is no longer required by law or for performance of a contract. An OAuth connection can be removed from the profile when another sign-in method is available.
The store owner must add the operator’s legal details and a current privacy email address before production publication. Until then, this policy is a technical template.