Privacy Policy
How Echosphere protects your data and privacy
TL;DR: Echosphere is a multi-tenant platform provider. We collect minimal platform data needed to operate the service. Each tenant store operates independently with its own privacy obligations to their customers.
1. Introduction
Echosphere ("we," "us," or "our") operates a multi-tenant e-commerce platform at nodes.ink and related subdomains. This Privacy Policy explains how we collect, use, and protect information in connection with our platform services.
Important Distinction: Echosphere is a platform provider. When you visit a store hosted on our platform, you are interacting with an independent merchant (the "tenant") who has their own privacy policy and data practices.
2. Information We Collect
2.1 Platform User Information (Store Owners/Tenants)
When you create a store on Echosphere, we collect:
- Account Information: Email address, name, password (encrypted)
- Business Information: Store name, business details, tax information
- Payment Information: Billing details for platform subscription (processed securely via Stripe)
- Technical Data: IP addresses, browser information, usage logs
- Store Configuration: Domain settings, SSL certificates, theme preferences
2.2 End Customer Information (Customers of Tenant Stores)
When you shop at a store hosted on Echosphere:
- Your data is primarily controlled by the store owner (merchant), not Echosphere
- We process this data on behalf of the merchant as a service provider
- We collect only what's necessary to provide platform functionality (order processing, payments, etc.)
- You should review the privacy policy of the specific store you're shopping at
2.3 Automatically Collected Information
- Server logs and access times
- Device and browser information
- Cookies and similar tracking technologies
- Performance and analytics data
3. How We Use Your Information
3.1 Platform Operations
- Provide and maintain the e-commerce platform services
- Process payments and manage subscriptions
- Generate and renew SSL certificates
- Monitor platform performance and security
- Provide customer support to store owners
3.2 Service Improvement
- Analyze platform usage to improve features
- Develop new functionality and services
- Conduct research and analytics
- Test and troubleshoot new features
3.3 Communication
- Send platform updates and security alerts
- Respond to support requests
- Send billing notifications
- Provide platform education and resources
3.4 Legal and Security
- Prevent fraud and abuse
- Comply with legal obligations
- Enforce our Terms of Service
- Protect rights and safety
4. Information Sharing and Disclosure
We do not sell your personal information.
4.1 Service Providers
We share data with third-party service providers who assist in platform operations:
- Payment Processors: Stripe, PayPal, Square (for payment processing)
- Infrastructure: MongoDB Atlas, Redis Cloud (for data storage)
- SSL Certificates: Let's Encrypt (for security certificates)
- Email Services: SendGrid, AWS SES (for transactional emails)
- Analytics: Self-hosted analytics (no data shared with third parties)
4.2 Legal Requirements
We may disclose information when required by law or to:
- Comply with legal process or government requests
- Enforce our Terms of Service
- Protect rights, property, or safety
- Investigate fraud or security issues
4.3 Business Transfers
If Echosphere is involved in a merger, acquisition, or sale of assets, user information may be transferred. We will notify affected users of any such change.
5. Data Security
We implement industry-standard security measures:
- Encryption: SSL/TLS for all data transmission, bcrypt for password hashing
- Access Controls: Role-based access with least privilege principles
- Infrastructure Security: Firewalls, intrusion detection, regular security audits
- Data Isolation: Complete tenant data separation in multi-tenant architecture
- Regular Updates: Continuous security patches and updates
- Monitoring: 24/7 security monitoring and logging
6. Data Retention
Store Owner Data: We retain your account data for as long as your account is active plus 90 days after account closure for legal and accounting purposes.
Customer Data (on behalf of merchants): Retention is controlled by the merchant's data retention policy. We provide tools for merchants to manage customer data deletion.
Logs and Analytics: Server logs are retained for 90 days. Aggregated analytics data may be retained longer but is anonymized.
7. Your Rights
7.1 Store Owners (Tenants)
You have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate information
- Deletion: Request deletion of your account and data
- Portability: Export your data in machine-readable format
- Objection: Object to certain data processing
7.2 End Customers
If you are a customer of a store on our platform:
- Contact the merchant directly for data requests related to your purchases
- We can assist merchants in fulfilling your data rights requests
- For platform-specific issues, contact privacy@nodes.ink
8. Cookies and Tracking
We use cookies and similar technologies for:
- Essential Cookies: Required for platform functionality (session management, authentication)
- Analytics Cookies: Self-hosted analytics to improve platform performance
- Preference Cookies: Remember your settings and preferences
Each tenant store may set their own cookies subject to their privacy policy.
9. International Data Transfers
Echosphere servers are located in Canada. If you access our platform from outside Canada, your data will be transferred to and processed in Canada. We ensure appropriate safeguards are in place for such transfers.
10. Children's Privacy
Echosphere platform services are not intended for individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at privacy@nodes.ink.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify store owners of material changes via email and update the "Last Updated" date. Continued use of the platform after changes constitutes acceptance.
12. Contact Us
For privacy-related questions or to exercise your rights:
- Email: privacy@nodes.ink
- Support: Contact Form
- Response Time: We respond to privacy requests within 30 days
13. Regulatory Compliance
GDPR (European Users): Echosphere complies with GDPR requirements. EU residents have additional rights under GDPR including data portability and the right to lodge a complaint with a supervisory authority.
CCPA (California Residents): California residents have specific rights under CCPA. We do not sell personal information. See our Compliance Page for details.