Privacy Policy

AnalyzeUp Intelligence Platform ("AnalyzeUp", "we", "us", or "our") provides automated inventory intelligence, reorder orchestration, and retail demand forecasting for digital merchants and commerce brands.

This policy applies to all visitors, registered workspace members, and merchants who install our application or connect external platforms (including Shopify, Google Drive, Zoho, Tally, or custom ERP systems).

We collect only the minimum data required to compute inventory predictions, margin intelligence, and workflow automations:

AnalyzeUp processes your data strictly for legitimate commercial purposes:

• Predictive Analytics: Generating statistical sales velocity models, seasonal demand projections, and stock depletion forecasts.
• Dead-Stock Detection: Highlighting capital locked in non-moving inventory and formulating markdown or liquidation recommendations.
• Purchase Order Generation: Synthesizing reorder thresholds to automatically draft supplier purchase orders.
• Return Rate Intelligence: Identifying SKUs with high defect or return rates to protect gross margins.
• Security Auditing: Recording workspace authentication events, team member modifications, and integration synchronization logs.

AnalyzeUp is built on an enterprise multi-tenant cloud architecture. Every merchant workspace is allocated a dedicated, immutable tenant identifier (tenantId).

• Database Level Segregation: All Firestore database rules and server queries require verified session tenant tokens matching the requested document's tenantId.
• Zero Cross-Tenant Leakage: No merchant can view, query, or inadvertently access the inventory figures or sales history of any other merchant on the platform.
• Encryption Everywhere: Data in transit is encrypted using Transport Layer Security (TLS 1.3), and all data at rest is encrypted using AES-256 standards.

Our Shopify integration is built strictly adhering to Shopify Partner API best practices (API Version 2026-07).

Token Vaulting: Permanent offline merchant access tokens are encrypted using military-grade AES-256-GCM encryption keys stored in isolated environment secret vaults. Tokens are never transmitted to client browsers or exposed in error logs.

AnalyzeUp provides an optional Google Drive integration to enable merchants to import catalog spreadsheets, synchronize supplier purchase orders, and automate stock records directly from their Google cloud storage.

• Explicit Merchant Action: AnalyzeUp only reads, parses, or modifies files that you explicitly select for inventory, PO, or supplier sync. We never scan, index, or access unrelated personal files or folders in your Google Drive.
• Zero AI Model Training: Data obtained via Google Drive APIs is NEVER used to train, retrain, or fine-tune generalized artificial intelligence (AI) or machine learning (ML) foundation models.
• Zero Advertising or Brokering: Google user data is never transferred, rented, or sold to third-party data brokers or advertising platforms.
• Revocation of Access: You may disconnect Google Drive at any time from Dashboard > Integrations, or directly revoke AnalyzeUp's access in your Google Account Security Settings.

AnalyzeUp provides an AI Executive Copilot and autonomous brief generators. When you engage with the copilot or request AI-generated inventory summaries:

• Zero Model Training: Your business data, catalog entries, and customer sales metrics are NEVER used to train, retrain, or fine-tune public foundation models (e.g., OpenAI or Google models).
• Ephemeral Processing: Inquiries submitted to the copilot are processed ephemerally. Only aggregated numerical summaries (e.g. "Top 5 low stock SKUs") are provided in prompt context to generate natural language explanations.
• Data Anonymization: Personal names, credit card numbers, and raw shipping addresses are stripped prior to analytical processing.

We work with trusted tier-1 infrastructure providers bound by strict Data Protection Agreements (DPAs):

We retain your data only for as long as your workspace remains active and in good standing.

Depending on your jurisdiction, you possess statutory rights regarding your personal and business data:

• Right of Access: You may request a machine-readable copy of all catalog, order, and audit log records held by AnalyzeUp.
• Right to Rectification: You may modify inaccuracies directly via workspace settings or contact support.
• Right to Erasure ("Right to be Forgotten"): You may request permanent deletion of your account and all associated tenant documents.
• Right to Data Portability: You can export full inventory intelligence reports, supplier lists, and purchase orders in CSV and Excel formats anytime directly from the dashboard.

To exercise any of these rights, submit a formal request to privacy@analyzeup.com. We process all verified data requests within 14 calendar days.

AnalyzeUp adheres to comprehensive defense-in-depth security standards:

• Encryption at Rest: High-entropy AES-256 encryption across all Firestore document stores and database backups.
• Encryption in Transit: Strict HTTPS with TLS 1.3 enforced across all web interfaces, APIs, and webhook ingress points.
• Privileged Access Control: Server-side Admin SDK operations are strictly confined to authenticated service account credentials; developers and operational staff have zero direct access to merchant private keys or raw tokens.
• Continuous Vulnerability Auditing: Automated code scanning, dependency security checks, and regular penetration assessments.

We use strictly necessary session tokens and cookies to maintain authenticated workspace sessions, prevent Cross-Site Request Forgery (CSRF), and remember interface preferences (such as Dark/Light theme mode). We do not deploy third-party advertising cookies or cross-site tracking pixels.

AnalyzeUp is a commercial enterprise SaaS application tailored solely for commercial merchants and businesses. It is not intended for or directed toward children under 18 years of age. We do not knowingly collect personal information from minors.

We may update this Privacy Policy periodically to reflect enhancements in technology, evolving data protection laws, or operational changes. When material modifications occur, we will post an announcement in the merchant dashboard and revise the "Last Updated" date at the top of this page.

For privacy inquiries, GDPR/CCPA data requests, or security audit reviews, please reach out directly to our Data Protection Officer: