Privacy Policy

1. Information We Collect

DNS Publishing, LLC DBA loveitandbuyit.com ("we", "us", "our") collects information you provide directly to us and information automatically collected when you use our Service:

• Account Information: Name, email address, password, company name
• Payment Information: Processed securely through our payment processor (Authorize.net) - we do not store full credit card numbers
• Marketplace Credentials: Encrypted OAuth tokens and API keys for eBay, Amazon, Walmart, Etsy, TikTok Shop
• Business Data: Product listings, inventory, pricing, supplier information, sales data
• Usage Data: How you interact with our Service, features used, automation settings, API calls
• Device Information: IP address, browser type, operating system, device identifiers, unique device tokens
• Cookies and Tracking: Session cookies, authentication tokens, analytics data, preference cookies
• Communications: Support tickets, emails, feedback, and other communications with us

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process transactions and manage your subscription
• Authenticate your account and marketplace connections
• Execute automated workflows on your behalf (product discovery, listing creation, etc.)
• Send service notifications, updates, and support messages
• Respond to your inquiries and provide customer support
• Monitor and analyze usage patterns to improve performance
• Detect, prevent, and address technical issues, fraud, and security threats
• Comply with legal obligations and enforce our Terms of Service
• Conduct research and development to improve our Service
• Send marketing communications (with your consent, where required)

Legal Basis for Processing (GDPR): We process your personal data based on: (1) your consent, (2) performance of our contract with you, (3) our legitimate business interests, or (4) compliance with legal obligations.

3. Information Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

• With Marketplace Platforms: We share necessary data with eBay, Amazon, Walmart, Etsy, TikTok Shop, etc. as required to provide the Service (creating listings, managing inventory, etc.)
• Service Providers: We use trusted third-party service providers including:
  • Authorize.net (payment processing)
  • Postmark (transactional email delivery)
  • Cloud hosting providers (infrastructure)
  • Analytics services (usage analytics)
• Legal Requirements: If required by law, court order, subpoena, or to protect our rights, property, and safety
• Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of assets, subject to this Privacy Policy
• With Your Consent: When you explicitly authorize us to share your data
• Aggregated Data: We may share anonymized, aggregated data that cannot identify you

4. Data Security

We implement industry-standard security measures to protect your information:

• Encryption in Transit: All data transmission uses HTTPS/TLS 1.3 encryption
• Encryption at Rest: API keys and OAuth tokens are encrypted at rest using AES-256 encryption with PBKDF2HMAC key derivation
• Secure Payment Processing: PCI-DSS compliant payment processing through Authorize.net - we never store full credit card numbers
• Access Controls: Role-based access controls (RBAC) and principle of least privilege
• Multi-Factor Authentication: 2FA via TOTP and WebAuthn/Passkeys
• Security Monitoring: Continuous monitoring for suspicious activity and unauthorized access attempts
• Regular Audits: Security assessments, penetration testing, and vulnerability scanning
• Data Backups: Regular encrypted backups with disaster recovery procedures
• Employee Access: Limited employee access on a need-to-know basis with audit logging

However, no security system is impenetrable. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

5. Data Retention

We retain your information for as long as necessary to provide you services and fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: Data is retained while your subscription is active
• Canceled Accounts: You may export your data within 30 days of cancellation
• Deleted Accounts: Personal data is deleted or anonymized within 90 days of account deletion, except where required by law
• Backup Retention: Backup copies may persist for up to 90 additional days for disaster recovery purposes
• Legal Holds: Data may be retained longer if required for legal, tax, audit, or compliance purposes
• Transaction Records: Financial and transaction data retained for 7 years to comply with tax and accounting regulations
• Audit Logs: Security and audit logs retained for 2 years for compliance and security purposes

Upon expiration of retention periods, we securely delete or anonymize your personal data in accordance with data protection laws.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request a copy of your personal information we hold
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information ("right to be forgotten")
• Portability: Export your data in a portable format (CSV, JSON)
• Opt-Out: Unsubscribe from marketing communications (transactional emails will continue)
• Withdraw Consent: Revoke previously granted permissions for data processing
• Object: Object to certain processing of your data, including automated decision-making
• Restrict Processing: Request temporary restriction of processing your data
• Lodge a Complaint: File a complaint with your local data protection authority

To exercise these rights, contact us at privacy@loveitandbuyit.com. We will respond to verifiable requests within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Essential Cookies: Maintain your session and keep you logged in (required for Service functionality)
• Preference Cookies: Remember your preferences and settings
• Analytics Cookies: Analyze usage patterns and improve our Service (with your consent)
• Security Cookies: Detect fraud, abuse, and unauthorized access

Cookie Types: We use session cookies (deleted when you close your browser) and persistent cookies (remain until you delete them or they expire).

You can control cookies through your browser settings. Disabling essential cookies will prevent you from using certain features of the Service. For more information, visit www.allaboutcookies.org.

8. Third-Party Services

Our Service integrates with third-party platforms. Your use of these platforms is subject to their respective privacy policies. We are not responsible for their privacy practices:

• eBay: https://www.ebay.com/help/policies/member-behavior-policies/user-privacy-notice
• Amazon: https://www.amazon.com/gp/help/customer/display.html?nodeId=468496
• Walmart: https://corporate.walmart.com/privacy-security
• Etsy: https://www.etsy.com/legal/privacy/
• TikTok Shop: https://www.tiktok.com/legal/privacy-policy
• Authorize.net: https://www.authorize.net/company/privacy/
• Postmark: https://postmarkapp.com/privacy-policy

9. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children under 18.

If we discover we have inadvertently collected data from a child under 18, we will delete it promptly. If you believe we have collected information from a child under 18, please contact us immediately at privacy@loveitandbuyit.com.

10. International Data Transfers

Your information may be transferred to, stored, and processed in the United States and other countries where we or our service providers operate. These countries may have different data protection laws than your country of residence.

EU-US Data Transfers: For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we implement appropriate safeguards for international data transfers, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions where applicable
• Binding Corporate Rules for intra-company transfers (where applicable)
• Your explicit consent for specific transfers

By using our Service, you consent to the transfer of your information to countries outside your country of residence, including the United States, which may have different data protection rules.

11. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Data Controller: DNS Publishing, LLC is the data controller for your personal data
• Legal Basis: We process your data based on consent, contract performance, legal obligations, or legitimate interests
• Data Protection Officer: Contact our DPO at dpo@loveitandbuyit.com
• Automated Decision-Making: We may use automated decision-making for fraud detection and risk assessment. You have the right to human review of automated decisions
• Supervisory Authority: You have the right to lodge a complaint with your local data protection authority

We respond to data subject access requests within 30 days as required by GDPR. For complex requests, we may extend this period by an additional 60 days with notice.

12. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of categories and specific pieces of personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information (subject to exceptions)
• Right to Opt-Out of Sale: We do not sell personal information. We do not share personal information for cross-context behavioral advertising
• Right to Correct: Request correction of inaccurate personal information
• Right to Limit Use of Sensitive Personal Information: Request limitation on use of sensitive personal information (we do not use sensitive data beyond what's necessary)
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights
• Authorized Agent: You may designate an authorized agent to make requests on your behalf

Categories of Personal Information Collected: Identifiers, commercial information, Internet activity, geolocation data, professional information, and inferences.

Business Purpose for Collection: Providing services, processing transactions, security, compliance, and improving our Service.

To exercise your California privacy rights, email privacy@loveitandbuyit.com or call 1-800-XXX-XXXX (toll-free). We verify your identity before processing requests and respond within 45 days (extendable by 45 days with notice).

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

We will notify you of material changes by email to the address associated with your account or via platform notifications at least 30 days before the changes take effect. We will also update the "Last Updated" date at the top of this page.

Your continued use of the Service after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the changes, you must stop using the Service and may request deletion of your account.

14. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by applicable law. Notification will be provided without undue delay and within legally required timeframes (typically within 72 hours for GDPR).

We will provide information about the nature of the breach, affected data, potential consequences, and measures taken to address the breach and mitigate harm.

15. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have privacy concerns, please contact us:

Company: DNS Publishing, LLC DBA loveitandbuyit.com
Privacy Email: privacy@loveitandbuyit.com
Data Protection Officer: dpo@loveitandbuyit.com
General Support: support@loveitandbuyit.com
Website: https://loveitandbuyit.com
Jurisdiction: State of Delaware, United States
Response Time: We will respond to privacy inquiries within 30 days (45 days for California residents)