Privacy Policy
DukanBoxx — AI Shop Manager · aishopmanager.com
1. Who we are
DukanBoxx (AI Shop Manager) operates the Service at aishopmanager.com. For privacy questions contact info@aishopmanager.com.
2. What we collect
Account details (name, email, password hash), your business workspace content (products, customers, sales, CRM, files you upload), technical logs (sign-in and security events), and — where you use public business pages — information you choose to publish.
3. Google AdSense and Cookies Policy
We use Google AdSense to serve advertisements on our website. Google, as a third-party vendor, uses cookies to serve ads based on your prior visits to our website or other websites on the Internet. Google's use of advertising cookies enables it and its partners to serve ads to our users based on their visit to our sites and/or other sites on the Internet. Users may opt out of personalized advertising by visiting Ads Settings in their Google Account.
4. What we never do
We never sell your data. We do not mix one business's data with another's: every record is tenant-scoped and checked against your login on every request. Cost prices, stock levels and CRM data are never exposed on public pages.
5. Public business pages
If you enable a public page, only the fields you choose to publish are visible. QR analytics are anonymous (no personal data); CRM enquiries are created only when a visitor voluntarily submits their details.
6. AI features
AI assistants receive only your business's public catalogue and business-profile data, never other tenants' data, and are instructed to never invent products or prices.
7. Payment processing
Memberships are billed through Razorpay. Card/UPI details are handled by Razorpay and never stored on our servers. We store only billing status and invoice metadata.
8. Communications
Transactional email (password reset, account notices) is delivered through our email provider using the address on your account. Marketing messages require your consent and can be opted out at any time.
9. Cookies and local storage we set ourselves
In addition to the advertising cookies described in section 3, we use a small set of strictly necessary cookies: a signed session cookie to keep you logged in (httpOnly, SameSite, Secure in production) and a per-visit storage flag for site features such as the promotional popup. We also use local storage for the same purposes (for example, remembering your English/हिंदी language choice). These are essential for the Service to function and are never used to build advertising profiles.
10. Security
Passwords are hashed; sessions use signed, httpOnly, SameSite cookies (Secure in production); external account tokens are encrypted at rest; webhook payloads are signature-verified; sensitive actions are audit-logged. Payment card/UPI data never touches our servers — it is handled end-to-end by our payment provider.
11. Payment logs
We store only billing metadata for memberships: plan, status, invoice numbers, amounts and provider payment references. Full payment instrument details live exclusively with the payment provider under its own security and compliance controls.
12. Data retention
Your data is retained while your account is active. Cancelling keeps your data until you request deletion. Backups are retained per our backup policy.
13. Your rights
You may request access to, correction of, or deletion of your personal data at info@aishopmanager.com.
To request deletion of your user account, use the account deletion request page. To close a business workspace you own, sign in and open Account & Security → Delete account or business. Requests are verified and reviewed manually; records we must retain for tax, accounting or legal reasons are not deleted.
Last updated: October 2026