Privacy Policy

1. Overview

This Privacy Policy explains how Lammah SaaS collects, uses, stores, and protects information when merchants use our platform to manage store automation, order syncing, customer renewals, reminders, Digital Assets delivery, and Software Licenses fulfillment through an Automated Delivery System.

2. Information We Collect

We may collect account information such as name, email address, phone number, business details, store settings, subscription status, and authentication data. We may also collect operational store data required to provide the service, including product records, order records, customer contact details, subscription expiry dates, webhook logs, and integration configuration.

3. Store and Integration Data

When you connect a commerce store or other integration, we process only the data needed to deliver the requested features. Sensitive credentials such as API keys and secrets are stored using encryption where supported by the application.

4. How We Use Data

We use collected data to provide and improve the service, sync orders and products, send authorized renewal reminders, deliver Digital Assets and Software Licenses, calculate analytics, secure accounts, troubleshoot technical issues, and comply with legal obligations.

5. Data Sharing

We do not sell merchant data or customer data. We do not share store data with outside parties except when necessary to operate the service, such as hosting providers, payment processors, messaging providers, email providers, analytics tools, or when required by law.

6. Payment Data

Subscription payments are processed by Paddle as Merchant of Record. We do not store full card numbers or full payment credentials within our application environment. Paddle may provide us with transaction, subscription, and billing status information required to manage your account.

7. Security

We apply administrative, technical, and organizational safeguards designed to protect data from unauthorized access, alteration, disclosure, or destruction. No internet-based service can be guaranteed to be fully secure, but we work to maintain reasonable protection for merchant and customer data.

8. Data Retention

We retain information for as long as needed to provide the service, comply with legal obligations, resolve disputes, enforce agreements, and maintain business records. You may request account or data deletion where legally permitted.

9. Your Rights

Depending on your location, you may have rights to access, correct, export, delete, or restrict processing of personal data. Requests can be submitted through the support channels available in your account.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the service after changes become effective means you accept the updated policy.