Privacy Policy

Last updated: March 26, 2026

EIGHTLEAF ("we", "our", or "us") operates the business operations platform available at app.eightleaf.in. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

1. Information We Collect

We collect the following types of information:

• Account information — name, email address, company name, and password when you register.
• Business data — challans, invoices, orders, inventory, and other business records you create or upload.
• Third-party integrations — when you connect services like Shopify or Meta Ads, we collect access tokens and associated data (orders, campaign performance) on your behalf.
• Usage data — pages visited, features used, and error logs to improve the platform.

2. How We Use Your Information

• To provide and operate the EIGHTLEAF platform and its features.
• To sync and display your connected third-party data (Shopify orders, Meta Ads campaigns).
• To send transactional emails (challans, invoices, password resets).
• To improve the platform based on usage patterns and feedback.
• To ensure platform security and prevent fraud.

3. Meta Ads Data

When you connect your Meta Ads account to EIGHTLEAF Marketing Hub:

• We access your ad campaign performance data using the ads_read permission.
• This data is used solely to display reports and analytics within your EIGHTLEAF account.
• We do not share your Meta Ads data with any third parties.
• We do not use your Meta Ads data for advertising purposes.
• You can disconnect your Meta account at any time from Settings → Marketing Hub.
• Upon disconnection, your synced Meta data is removed from our systems within 30 days.

4. Shopify Data

When you connect your Shopify store to EIGHTLEAF Sales Hub:

• We access your order and product data using read_orders and read_products permissions.
• This data is used solely to populate your Sales Hub order management dashboard.
• We do not share your Shopify data with any third parties.
• You can disconnect your Shopify store at any time from Settings → Sales Hub.

5. Data Storage and Security

Your data is stored securely on cloud infrastructure. We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS).
• Secure token storage for third-party integrations.
• Access controls limiting data access to authorised personnel only.

6. Data Sharing

We do not sell, rent, or share your personal or business data with third parties except:

• Service providers necessary to operate the platform (hosting, email delivery).
• When required by law or legal process.

7. Data Retention

We retain your data for as long as your account is active. Upon account deletion, your data is permanently removed within 30 days. You may request data deletion at any time by contacting us.

8. Your Rights

You have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Disconnect any third-party integrations at any time.
• Export your business data in CSV format.

9. Cookies

We use essential cookies only — for authentication and session management. We do not use tracking or advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of EIGHTLEAF after changes constitutes acceptance of the updated policy.

11. Children's Privacy

EIGHTLEAF is a business platform intended for users 18 years and older. We do not knowingly collect data from minors.