Privacy Policy

1. Our Core Privacy Commitment

At WBPM Cloud (operated by CreatoHub / WBPM Cloud Inc.), we understand that financial accounting, customer order lists, and product profit margins represent the most sensitive operational assets of an eCommerce business.

2. Information We Collect

• Account Information: Name, business email address, phone number, and organization name provided during registration.
• Connected Store Data: Order IDs, product line items, prices, shipping addresses, customer contact details, fulfillment statuses, and discount codes synchronized via WooCommerce REST API and Shopify Admin GraphQL webhooks.
• Cost & Ledger Records: Cost of Goods Sold (COGS), custom operating expenses, packaging overheads, and courier rate cards entered by the merchant.
• Marketing Analytics Tokens: Daily ad spend metrics, impressions, and click-through statistics fetched via Meta Graph API, Google Ads API, or TikTok Ads API (read-only attribution data).
• Billing Information: Payment transactions are handled directly through certified PCI-DSS Level 1 compliant Merchants of Record (Lemon Squeezy, Paddle, Stripe). We store only invoice identifiers, billing dates, and plan status—never full credit card numbers.

3. How We Use Collected Data

All ingested data is used exclusively for the following operational purposes:

• Calculating real-time True Net Profit, Gross Margin, and product-level unit economics.
• Powering the 2-way product catalog push between WooCommerce and Shopify.
• Detecting fraudulent orders, high-risk return candidates, and automated RTO scoring.
• Generating verifiable P&L reports, tax statements, and automated operating expense entries.
• Providing technical customer support and platform uptime monitoring.

4. Data Security & Tenant Isolation

Security is built into every layer of our infrastructure:

• 256-Bit TLS Encryption: All data in transit between your stores, browsers, and our cloud API is encrypted via modern TLS 1.3 protocol.
• Encryption at Rest: Database volumes and store connection secrets are encrypted using AES-256 standards.
• Tenant Isolation: Every organization has strict data segregation enforced at the ORM and database query layers, preventing cross-tenant leakage.
• Role-Based Access: Team member permissions ensure only authorized staff within your company can view profit and supplier margins.

5. Your GDPR & CCPA Rights

Regardless of your geographic location, WBPM Cloud grants all registered merchants the following rights:

• Right of Access & Portability: You can export your entire financial ledger, order history, and product catalog in CSV/JSON format at any time.
• Right to Rectification: You may edit and update any inaccurate data or tenant configuration directly from your settings.
• Right to Erasure (Right to be Forgotten): Upon account cancellation, you may request permanent deletion of all synchronized store records from our database.

6. Cookies & Tracking Technologies

We use strictly necessary session cookies to maintain secure authentication and theme preferences. We do not use third-party behavioral ad trackers or cross-site fingerprinting scripts.

7. Data Protection Officer & Inquiries

If you have any questions regarding our data privacy practices or wish to exercise your data rights, please contact our Data Protection Officer at: