Privacy
Last updated 12 September 2026.
Ecom Jarvis is a private workspace used by its operator and invited team members to run their own business. Accounts exist by invitation only, and the service is not offered to the public.
What the service processes
Three kinds of information. First, account identity from the sign-in provider: name, email address and the identifier of the signed-in account. Second, business data read from the platforms the operator connects, such as orders, products, advertising performance and email marketing statistics for accounts the operator owns or is authorized to manage. Third, technical records such as request logs and error reports, which keep the service running and secure.
The service is not used to build profiles of individual shoppers, and it does not sell any data.
Google account data
When a Google account is connected, the service requests only what the connected feature needs. Advertising access is read-only: campaign, keyword and product reporting, including the review status a product carries in the linked shopping account. Mailbox access, where enabled, is read-only Gmail access, used to organize support conversations. The service does not send email through Gmail.
Access and refresh tokens are stored encrypted and are used only to perform these reads on behalf of the account that granted them. Tokens are never shared with third parties and never used for advertising.
Limited use
Use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Data obtained through those APIs is used only to provide the features described here, is not transferred to others except as required for those features or by law, is not used for advertising, and is not read by people except with the account holder's permission, for security purposes, or where the law requires it.
Where data is held
Data is held in managed cloud infrastructure with encryption in transit and at rest, in a private network that is not reachable from the public internet. Access is limited to the operator and invited members, and sign-in is required for every page other than this one, the overview and the terms.
Sharing
Data is not sold, rented or traded. It is shared only with the infrastructure and platform providers needed to operate the service, such as hosting, database, authentication and the connected platforms themselves, and only to the extent a feature requires. Disclosure may also occur where the law requires it.
Keeping and deleting data
Business data is kept while the corresponding connection exists, so that history and trends remain meaningful. Disconnecting a platform removes its stored credentials. A request to delete an account and the data belonging to it can be made at the address below and is carried out within 30 days, except where records must be kept by law.
Withdrawing access
An owner can disconnect any platform inside the workspace at any time. Google access can also be withdrawn directly from the Google account, under Security and then Third-party apps with account access.
Contact
Questions about this policy or a request about your data: ilyassjdd1406@gmail.com.