Privacy Policy

1. Introduction

At Social Commerce Accountants Ltd ("SCA," "we," "our," "us"), we are committed to protecting your privacy and handling your personal data responsibly.

This Privacy Policy explains how we collect, use, and protect your information when you use our services, including our web application ("SCAi"), website, and integrations with third-party platforms such as Amazon, Shopify, TikTok Shop, and Xero.

We comply with applicable data protection laws, including the UK Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR).

2. Information We Collect

We may collect the following types of information:

• Account Information: Name, email address, login credentials, and company details provided when creating an account.
• Financial Data (via API integrations): Sales, refunds, payouts, fees, invoices, and accounting entries from platforms such as Amazon, Shopify, TikTok Shop, and Xero.
• Usage Data: Log data, IP address, browser type, and activity on our app/website.
• Support Data: Information you provide when contacting us for support or inquiries.

3. How We Use Your Information

We use your information for the following purposes:

• To provide and operate our SaaS application.
• To integrate and process data from third-party platforms (e.g. Amazon, Shopify, TikTok Shop, Xero) at your request.
• To generate analytics, dashboards, and reports relevant to your business.
• To ensure security, monitor usage, and detect/prevent fraud.
• To communicate with you about your account, updates, and support requests.
• To comply with legal and regulatory obligations.

We do not sell or rent your personal data to third parties.

4. Legal Basis for Processing

We process personal data under the following legal bases:

• Contractual necessity (to deliver the services you signed up for).
• Legitimate interests (to improve and secure our services).
• Legal obligations (to comply with accounting and tax laws).
• Consent (where required, e.g. marketing communications).

5. Data Sharing & Third Parties

We may share your information with:

• Cloud service providers (Supabase, Vercel, Resend, GitHub) for hosting, storage, and operations.
• Third-party platforms (Amazon, Shopify, TikTok Shop, Xero) for integrations you explicitly authorise.
• Professional advisors (accountants, auditors, legal).
• Regulators or authorities if legally required.

All third parties are vetted and must meet our security standards.

6. International Data Transfers

We primarily store data in the EU (Ireland) via Supabase. Some third-party providers may process data in other jurisdictions (e.g. US). Where data is transferred outside the UK/EU, we ensure safeguards such as Standard Contractual Clauses (SCCs) are in place.

7. Data Retention

• Client financial data is retained for the duration of the contract.
• Upon termination, all data is deleted within 30 days, unless retention is required by law.
• Backups are retained for 30 days before automatic deletion.

8. Your Rights

You have the following rights under GDPR:

• Right of access – request a copy of your data.
• Right to rectification – correct inaccurate data.
• Right to erasure – request deletion of your data.
• Right to restrict processing – limit data use.
• Right to data portability – receive your data.
• Right to object – opt out of processing.

Requests can be made by emailing contact@socialcommerceaccountants.com. We will respond within 30 days.

9. Security

We implement appropriate technical and organisational measures to protect your data, including:

• Encryption in transit (TLS/HTTPS) and at rest.
• Role-based access controls and multi-factor authentication.
• Row Level Security (RLS) to segregate client data.
• Regular vulnerability management and patching.

10. Children's Data

Our services are not directed at children under 18. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website.

12. Contact Us

For questions, concerns, or to exercise your rights, please contact: