Privacy Policy

1. Who We Are

Autofli ("we," "us," "our") operates a software-as-a-service platform for AI-powered e-commerce management. This Privacy Policy explains how we collect, use, share, and protect information when you use the Autofli platform, including our merchant dashboard and related services.

2. Information We Collect

We collect the following categories of information:

• Account data: Name, email address, business name, and profile information you provide during registration
• Payment data: Billing information processed securely through Stripe — we do not store raw payment card data
• Usage data: How you interact with the platform, features used, and actions taken
• Store data: Products, orders, customers, and other data generated through your use of the platform
• Technical data: IP address, browser type, device information, and session logs
• Communications: Messages you send to our support team

3. How We Use Your Information

• Provide, maintain, and improve the Autofli platform
• Process your subscription payments via Stripe
• Send service-related communications including account updates and billing notices
• Respond to support requests and resolve disputes
• Monitor platform security and prevent fraud or abuse
• Analyze aggregated usage patterns to improve product features
• Comply with legal obligations

4. How We Share Your Information

We do not sell your personal data. We share information only with:

• Stripe: Payment processing
• Clerk: Authentication and identity management
• Resend: Transactional email delivery
• Railway: Cloud infrastructure hosting
• Anthropic: AI model processing for platform features
• Cloudflare: CDN and DDoS protection
• Legal authorities: When required by law or legal process

All third-party providers are bound by data processing agreements and are prohibited from using your data for their own purposes.

5. Data Retention

We retain your account data for as long as your account is active and for 30 days after termination (to allow for account recovery). Billing records are retained for seven years as required by accounting regulations. You may request deletion of your data at any time.

6. Security

We implement industry-standard security measures including TLS encryption, access controls, and regular security audits. All payment processing is handled by Stripe (PCI-DSS Level 1 certified). Despite these measures, no system is completely secure — please protect your account credentials.

7. Your Rights

You have the right to:

• Access a copy of the personal data we hold about you
• Correct inaccurate information in your account
• Request deletion of your account and associated data
• Export your data in a machine-readable format
• Opt out of marketing communications at any time

To exercise these rights, contact: privacy@autofli.com. We will respond within 30 days.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or through a prominent notice in the platform. Your continued use of Autofli after changes take effect constitutes acceptance of the updated policy.

9. Contact

Privacy questions or data requests: privacy@autofli.com