Privacy Policy

Effective Date: [Insert Date]
Last Updated: [Insert Date]

Peneu Technologies Pvt. Ltd. ("Peneu", "we", "us", or "our") operates https://www.peneu.com and related applications (collectively, the "Services"). Your privacy is critically important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our platform, or otherwise interact with us.

1. Introduction

1.1. Peneu is a SaaS provider offering a no‑code e‑commerce platform for merchants (“Merchants”, “you”, or “your”) to create and manage online stores. We are not a seller of goods—Merchants list and sell directly to their customers.

1.2. This Policy applies to all personal and non‑personal data that we collect in connection with:

• Visiting or using our website and subdomains

• Registering for and using our platform and mobile apps

• Communicating with us via email, chat, or phone

• Participating in marketing campaigns, surveys, or promotional events

1.3. By accessing or using our Services, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our Services.

2. Data Controller & Data Processor Roles

2.1. When Merchants collect Personal Data from their customers (end‑users), you are the “Data Controller” and Peneu acts as a “Data Processor” under applicable data protection laws (e.g., DPDP Act 2023, GDPR where applicable).

2.2. For our own corporate communications, marketing, and user‑account management, Peneu is the “Data Controller” and is responsible for its own processing activities as described herein.

3. Information We Collect

We collect different types of information depending on how you use our Services:

3.1 Information You Provide

• Account Registration: Name, business name, email, phone number, address, GSTIN/PAN, bank details for payouts.

• Profile & Settings: Profile photo, social media links, branding assets, custom domain information.

• Support & Communications: Content of tickets, chat transcripts, call recordings (with consent).

• Marketing & Surveys: Responses to surveys, contest entries, newsletter sign‑ups, event registrations.

3.2 Information We Automatically Collect

• Usage Data: Pages visited, features used, session duration, error logs, crash reports.

• Device & Technical Data: IP address, browser type and version, operating system, device model, screen resolution, language settings.

• Cookies & Similar Technologies:

  • Essential Cookies: Required for secure login and platform functionality.

  • Analytics Cookies: To analyze platform performance (via Google Analytics, Mixpanel).

  • Marketing Cookies: To deliver targeted promotions (via Facebook Pixel, Google Ads).

3.3 Information from Third Parties

• Identity Verification: KYC/AML providers may share verification status.

• Payment Gateways & Couriers: Transaction statuses, tracking updates (Merchant‑customer data passes through but is not stored permanently by us).

• Social Media Integrations: With your permission, we may retrieve profile information for one‑click social logins.

4. How We Use Your Information

We use collected data for the following purposes:

4.1 Provisioning & Improving Services

• To set up and maintain your Merchant account.

• To process transactions, generate invoices, and manage orders.

• To troubleshoot issues, perform analytics, and optimize platform performance.

• To develop new features, themes, integrations, and mobile app updates.

4.2 Communication & Support

• To send account‑related notifications, password resets, billing invoices.

• To respond to support tickets, live‑chat requests, and feedback.

• To conduct surveys and gather feedback for product improvement.

4.3 Marketing & Promotional Activities

• To send newsletters, promotional offers, and event invitations.

• To tailor marketing messages based on your interests and usage patterns.

• To analyze campaign effectiveness and refine targeting.

4.4 Compliance & Security

• To comply with legal obligations (e.g., responding to subpoenas, tax audits).

• To detect and prevent fraud, abuse, and security incidents.

• To enforce our Terms & Conditions and Acceptable Use Policy.

5. Legal Bases for Processing

For our own communications where Peneu is Data Controller, we rely on:

• Contractual Necessity: Processing data required to provide the Services you requested.

• Legitimate Interests: For platform improvement, fraud prevention, direct marketing (opt‑out available).

• Consent: Where required (e.g., marketing emails, certain cookies).

• Legal Obligation: To comply with tax, accounting, and regulatory requirements.

6. Disclosure of Your Information

We may share your information with:

6.1 Service Providers & Partners

• Hosting & Infrastructure: AWS, Azure, or Google Cloud for data storage and processing.

• Analytics & Monitoring: Google Analytics, Sentry, Mixpanel for usage analysis.

• KYC/AML Providers: e‑KYC vendors for identity verification.

• Payment & Logistics Integrations: Gateways and couriers for transaction and shipping data flow (data retention per theirterms).

• Email & SMS Providers: For transactional and marketing communications.

6.2 Business Transfers

• In connection with a merger, acquisition, or sale of assets, your data may be transferred to the successor entity (with notice).

6.3 Legal Requirements

• To comply with a court order, subpoena, or governmental request.

• To protect Peneu’s rights, privacy, safety, or property, and/or that of our users.

6.4 Aggregated & Anonymized Data

• We may share usage statistics and aggregated trends that do not identify individuals.

7. Cookies & Tracking Technologies

7.1 Types of Cookies

• Strictly Necessary: Always enabled; used for authentication and security.

• Performance & Analytics: Optional; measure portal usage and performance.

• Functionality: Retain user preferences and settings.

• Targeting & Advertising: Deliver relevant ads on third‑party sites.

7.2 Managing Cookies

You can disable or delete cookies via your browser settings. Note that blocking essential cookies may prevent the platform from functioning properly.

8. Data Security

We implement industry‑standard safeguards:

• Encryption: TLS in transit; AES‑256 at rest for sensitive data.

• Access Controls: Role‑based permissions; two‑factor authentication optional for Merchants.

• Regular Audits & Penetration Testing: To identify and remediate vulnerabilities.

• Incident Response Plan: Rapid detection, containment, and notification procedures in case of data breaches.

9. Data Retention & Deletion

9.1 Retention Periods

• Account Data: Retained as long as your account is active.

• Financial Records: Retained for at least 7 years for tax compliance.

• Support & Communication Logs: Retained for up to 5 years unless longer retention is required.

• Cookies & Tracking Data: Per cookie expiry or up to 2 years.

9.2 Data Deletion

• You may request deletion of your Merchant account via dashboard or [email protected].

• Upon deletion, we will export your data for 30 days, then purge it from active systems.

• Anonymized usage data and aggregated analytics may be retained indefinitely.

10. Your Privacy Rights

Depending on your jurisdiction, you may have:

• Access: Request copies of your personal data.

• Correction: Update incomplete or inaccurate data.

• Deletion (Right to be Forgotten): Erase data unless required to retain for legal reasons.

• Portability: Obtain your data in a structured, commonly used format (JSON, CSV).

• Restriction: Limit processing for specific purposes.

• Objection: Object to processing based on legitimate interests or marketing.

• Withdraw Consent: At any time for processing that relies on consent.

To exercise these rights, contact [email protected]. We will respond within 30 days (or as required by local law).

11. International Transfers

Peneu is headquartered in India and uses global cloud providers. Personal data may be transferred to, stored, and processed in countries outside your own. We ensure adequate protections through:

• Standard Contractual Clauses (SCCs) where required.

• Privacy Shield–equivalent safeguards for transfers to jurisdictions without adequacy decisions.

12. Children’s Privacy

Our Services are not directed to children under 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected such data, please contact us at [email protected] to have it deleted.

13. Marketing Communications

You may opt out of promotional emails at any time by clicking the “unsubscribe” link or contacting us. Transactional messages (e.g., invoice emails, account s) cannot be opted out of.

14. Third‑Party Links & Embeds

Our website and platform may contain links to third‑party websites or embedded content (e.g., YouTube, Google Maps). We are not responsible for the privacy practices of those sites. We encourage you to read their privacy policies.

15. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will post the revised policy with a new “Last Updated” date and, if the changes are significant, provide notice via email or in‑app notification. Continued use constitutes acceptance.

16. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy, please contact us:

• Email: [email protected]

• Address:
  Peneu Technologies Pvt. Ltd.
  3rd Floor, Landmark Cyber Park,
  Sector 67, Gurugram, Haryana – 122102, India

• Phone: [Insert support number]

Thank you for trusting Peneu with your data. We remain committed to protecting your privacy and providing transparency in our data practices.