Protecting the privacy and security of our users is an important part of operating the Prebit platform. We are committed to handling personal information responsibly, transparently, and in accordance with applicable privacy and data protection laws.

This Privacy Policy applies to information collected through: - The Prebit website; - Merchant accounts; - Online stores powered by Prebit; - APIs and developer tools; - Customer support interactions; - Documentation and developer resources; and - Other products and services we provide.

Depending on how you interact with Prebit, we may act either as a data controller (or equivalent under applicable law) or as a data processor acting on behalf of merchants.

The information we collect depends on how you use the Services.

Account Information When you create or manage a Prebit account, we may collect information including: - Name, Email address, Phone number; - Company or business name, Business address, Billing address; - Country or region, Tax or GST information where required; - Account credentials, Two-factor authentication settings, Subscription plan details.

Store Information When you create a store using Prebit, we may collect and process information relating to your business, including: - Store name & domain, Branding assets, Business information & settings; - Product catalogs, Collections, Inventory records; - Customer records, Orders, Shipping & Tax configurations; - Discount rules, Store policies, Theme & API configurations.

Merchant Customer Data Merchants may upload or collect information relating to their own customers through the Services (Customer names, emails, shipping & billing addresses, order history, purchase preferences). Prebit processes this information solely to provide the Services to the merchant.

Billing Information For paid Services: Subscription plan, Invoice information, Billing contact, Payment status, Transaction identifiers. Prebit does not store complete payment card numbers or card verification values.

Technical & Usage Information Automatically collected technical information includes IP address, browser type & version, device identifiers, operating system, network info, session duration, log files, and error diagnostics.

Cookies & Analytics We use essential, security, analytics, performance, and preference cookies to maintain authenticated sessions and optimize performance.

We use information for legitimate business purposes necessary to operate and improve the Services.

This includes using information to: - Create and manage accounts & authenticate users; - Provide ecommerce platform functionality & operate online stores; - Process subscriptions, billing, and GST compliance; - Maintain account security, prevent fraud, and detect abuse; - Respond to customer support requests and monitor infrastructure health; - Develop new products, maintain APIs/SDKs, and generate analytics; - Provide AI-powered features requested by users; - Comply with legal obligations and enforce agreements.

Merchants retain ownership of the content and business data they upload to the Prebit platform (Products, Orders, Customers, Inventory, Images, Themes, Store content).

Prebit processes merchant data only as necessary to provide, maintain, secure, improve, and support the Services. We do not claim ownership of merchant store data.

Where Prebit processes personal information on behalf of a merchant, the merchant is generally responsible for determining the purposes and legal basis for processing that information.

Prebit uses cookies and similar technologies to provide a secure and reliable experience.

The types of cookies we may use include: - Essential Cookies: Required for core platform functionality & security. - Login Cookies: Maintain authenticated sessions across the platform. - Security Cookies: Help prevent fraudulent activity and protect user accounts. - Analytics Cookies: Help us understand feature adoption and usability. - Performance Cookies: Monitor platform loading times and technical reliability. - Preference Cookies: Remember user settings like language and display options.

Most web browsers allow users to manage, block, or delete cookies through browser settings.

We may use analytics tools (such as Google Analytics, Microsoft Clarity, and similar platforms) to better understand how users interact with the Services.

Analytics information includes aggregated usage statistics, feature adoption, navigation patterns, and performance metrics to help us optimize usability and reliability.

Prebit works with trusted third-party service providers that assist in operating the platform (cloud hosting, payment processing, email delivery, AI capabilities, security, and logging).

These providers process information only to the extent necessary to perform services on our behalf. Their handling of information is governed by their own privacy policies and contractual obligations.

Certain Prebit features may use artificial intelligence to generate content, recommendations, code suggestions, or product descriptions.

To provide these features, AI systems process user-submitted prompts or store inputs. Users should avoid submitting sensitive personal information to AI features unless necessary. AI outputs should be reviewed before relying upon them for legal, financial, or business decisions.

You can connect an AI assistant, such as Claude or ChatGPT, to your Prebit store through the Prebit connector (mcp.prebit.in). This section explains what happens when you do.

What the AI App Can Access - You sign in with your Prebit account and choose one store and the access to give: view only, or view and edit. The AI app never gets more access than your own role in that store, and your role is checked again on every request. - With the access you approve, it can read and change store information such as products, collections, media, theme files, pages and content, and, where offered, orders, customers, draft orders and discounts. - It cannot delete anything, issue refunds, cancel orders, take payments, or change tax, payment, domain, staff or billing settings. Making a theme live, or changing shipping zones, rates or delivery & cash-on-delivery rules, requires a code we email to you describing the exact change (after one approval, the same kind of change needs no new code for 10 minutes).

What Prebit Stores About a Connection - The connection itself: which account and store, which AI app, the access granted, and when it was last used. - Sign-in tokens, stored only in hashed form. Access tokens expire after one hour. Refresh tokens expire after 30 days unless renewed by continued use. - An activity log of the changes the AI app makes: which action, a short summary, the result and the time. It is kept for 90 days. Read-only requests are not logged. - Approval codes for publishing a theme or changing shipping settings, stored in hashed form and valid for 10 minutes.

We do not receive your conversation with the AI app. We only receive the requests it sends to Prebit.

What the AI App Provider Receives Information the AI app reads from your store through the connector is sent to that app's provider (for example Anthropic or OpenAI) and is handled under that provider's own terms and privacy policy, not ours. Please review their policies before connecting.

No Model Training Prebit does not use information accessed through connected AI apps to train AI models.

Seeing and Ending a Connection Every connected AI app, and the changes it made, is listed under Settings, Connected AI apps in your Prebit dashboard, where you can disconnect it at any time. Access stops immediately. If you are removed from a store, or your role there is reduced, the AI app's access is reduced or ended on its next request.

Prebit does not sell personal information to third parties.

We may disclose information only: - To trusted service providers supporting the Services; - To comply with applicable laws, court orders, or governmental requests; - To protect the rights, safety, security, or property of Prebit and its users; - In connection with a merger, acquisition, or business asset sale; - With your consent or at your direction.

We retain information only for as long as reasonably necessary to provide the Services, maintain merchant accounts, process subscriptions, fulfill legal/tax obligations, resolve disputes, and maintain platform security.

When information is no longer required, we take reasonable steps to delete, anonymize, or securely dispose of it.

We implement reasonable technical, administrative, and organizational measures to protect information against unauthorized access, disclosure, or destruction.

Measures include: - Encryption in transit (TLS 1.3) and at rest (AES-256); - Secure cloud infrastructure & role-based permissions; - OAuth authentication & scoped API keys; - Security monitoring & vulnerability management.

Users are responsible for maintaining the confidentiality of account credentials and enabling two-factor authentication.

Depending on your location, you may have rights to access, correct, delete, or receive a portable copy of your personal data, or withdraw processing consent.

To exercise privacy rights, email us at: [email protected]

The Services are intended for businesses and individuals who are at least 18 years of age. Prebit does not knowingly collect personal information directly from children under 18. If we learn such data was collected, we will take steps to delete it.

Prebit and its service providers may process or store information in countries other than the country in which it was collected. We take reasonable measures to protect personal information during international transfers in accordance with legal requirements.

Prebit is committed to handling personal information in accordance with applicable laws, including: - The Digital Personal Data Protection Act, 2023 (India); - General Data Protection Regulation (GDPR) principles for relevant international jurisdictions.

We may update this Privacy Policy from time to time. When material changes are made, we will notify users through the Services or by email. The revised policy becomes effective upon publication.

If you have questions about this Privacy Policy or our privacy practices, contact us at:

Prebit - Website: https://prebit.in - Email: [email protected]