Privacy Policy

Who we are

OhoSync is operated by Monine AS, a company registered in Norway (org. no. [ORG NUMBER], [REGISTERED ADDRESS]) ("Monine", "we", "us"). We are the controller for your account data and act as a processor for the store and product data you sync through the Service, which you control. This policy explains what personal data we process and why.

Data we process

• Account data: your name, email address and a hashed password.
• Store connection data: your store URL and API credentials, stored encrypted at rest.
• Operational data: supplier feed configuration, product records, sync history, credit ledger and audit logs.
• Technical data: IP address and basic request metadata, used for security, rate-limiting and abuse prevention.

How and why we use it

We process this data to provide the Service — authenticating you, connecting to your store, running syncs, metering optional AI usage, and notifying you of failures — and to keep the Service secure. We do not sell your data or use it for advertising.

Legal basis (GDPR)

We rely on: performance of a contract (to provide the Service you sign up for); legitimate interests (securing the Service and preventing abuse); consent where required (for example, optional analytics cookies); and legal obligation (for example, retaining invoicing records).

Your rights (GDPR)

You have the right to access, rectify, export (portability) and erase your personal data, to restrict or object to processing, and to lodge a complaint with your supervisory authority (in Norway, Datatilsynet). You can exercise the core rights yourself in the app:

• Export your data — Account → Export your data downloads a machine-readable copy of your account and tenant data.
• Delete your account — Account → Delete account permanently removes Your Data, except records we must keep by law.

You can also contact us at [CONTACT EMAIL] to exercise any of these rights.

Retention

We keep your data for as long as your account is active. Operational logs (such as sync run history) are trimmed on a rolling schedule. Financial records (the credit ledger) and security audit logs are retained for as long as required to run the business and to meet legal obligations. When you delete your account, Your Data is removed except where retention is legally required.

Sub-processors and transfers

We use a small number of vetted sub-processors to run the Service (for example, cloud hosting and transactional email — [SUB-PROCESSOR LIST]). Where data is transferred outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Cookies

We use strictly necessary cookies to keep you signed in. Any optional analytics cookies are only set with your consent, which you can change at any time.

Contact

Monine AS, Norway — [CONTACT EMAIL] — [REGISTERED ADDRESS] — org. no. [ORG NUMBER].