Privacy Policy

1. Scope and Roles

Intellus Tech is a business-to-business service. We determine how information is used for operating accounts, authentication, platform security, subscriptions and invoices, support, contact requests, and public-site analytics.

Businesses also use Intellus Tech to manage their own customers, personnel, transactions, communications, and records. For that information, the business decides why it is collected and how it is used, and Intellus Tech processes it to provide the services selected and configured by that business. If you are a customer, employee, or contact of a business using Intellus Tech, you should first direct questions about that business's use of your information to the business itself.

2. Information We Collect

Depending on the features used, we may process the following categories of information:

• Account and profile information: first and last name, email address, phone number, profile image, verification status, password hash, account status, onboarding preferences, and business memberships.
• Authentication and security information: login sessions, access-token metadata, IP address, user agent, device description, trusted-device records, one-time verification codes, two-factor authentication settings, passkeys, and security-event information.
• Business and team information: business name, description, logo, locations, settings, members, invitations, teams, roles, permissions, assigned agents, notification settings, and activity logs.
• Catalog and inventory information: categories, products, variants, images, prices, costs, stock levels, locations, movements, reservations, transfers, and adjustments.
• Customer and transaction information: customer names, business names, email addresses, phone numbers, tax numbers, addresses, notes, credit limits, sales, order items, discounts, taxes, recorded payment methods and references, refunds, shipment details, and order status. Intellus Tech records this information but does not itself receive or hold the funds recorded in a business's sales or lease records.
• Leasing information: lease terms, items, deposits, installment schedules, payment records, balances, overdue amounts, returns, renewals, cancellations, and buyout information.
• Communications and inbox information: connected account identifiers, contact profiles, conversation participants, message bodies, subjects, recipients, attachments, reactions, delivery status, tags, assignments, saved filters, quick replies, templates, and provider metadata for supported messaging and email channels.
• Automation and AI information: automation graphs, triggers, conditions, run history, prompts, message context, text, images, knowledge content, generated responses, selected provider and model, token usage, latency, and error information.
• Billing information: selected package, subscription status, limits and usage, invoice currency, billing name, contact information, address, invoice line items, taxes, issue and due dates, payment status, and receipts. Intellus Tech does not currently promise automatic card charging through the platform.
• Integration and configuration information: connected Shopify store details, Meta account and page identifiers, WhatsApp numbers, Facebook and Instagram profiles, Gmail or Outlook account details, IMAP/SMTP server settings, logistics settings, webhook destinations, granted permissions, and encrypted access credentials or API keys where required.
• Files and media: profile images, product images, inbox attachments, voice messages, documents, invoice PDFs, receipts, and other files uploaded or imported through enabled services.
• Support, review, and contact information: support tickets and replies, contact-form name, email, phone, company, subject, message, submission status, IP address, customer ratings, comments, and public-link tokens.
• Technical and analytics information: IP address, browser and device information, request metadata, timestamps, errors, public-page title, URL, path, and page-view events when Google Analytics is configured.

3. Sources of Information

We receive information directly from account holders and people who submit public forms; from business owners, administrators, members, and invited users; automatically from browsers, devices, and server requests; and from services a business chooses to connect. Connected services may include Shopify, Meta services, Google, Microsoft, email servers, AI providers, webhook destinations, storage services, and logistics providers configured by the business.

4. How We Use Information

We use information to:

• Create, verify, authenticate, secure, and administer accounts and business workspaces.
• Provide catalogs, inventory, sales, CRM, leasing, billing, inbox, automation, AI, reporting, review, support, and shipment-management features.
• Connect, synchronize, send, receive, and display information through services authorized by a business.
• Apply roles, permissions, package entitlements, usage limits, assignments, and audit controls.
• Generate and manage subscription invoices, receipts, service notices, verification messages, and support communications.
• Diagnose failures, prevent abuse, investigate security events, maintain availability, and improve the platform.
• Understand use of our public website through Google Analytics when it is configured.
• Comply with law, enforce our agreements, establish or defend legal claims, and protect users, businesses, Intellus Tech, and others.

We do not sell personal information. We do not use a business's customer or message content to advertise unrelated third-party products.

5. Reasons for Processing

We process information as needed to provide the platform and perform our agreements; to pursue legitimate operational interests such as security, fraud prevention, support, service improvement, and protecting legal rights; to follow a business customer's documented configuration and instructions; to comply with legal obligations; and, where required, with consent. Where processing depends on consent, consent may be withdrawn for future processing, although this does not affect processing already completed.

6. How Information Is Shared

We may disclose information in the following circumstances:

• Within a business workspace: to owners, administrators, members, teams, and agents according to their roles, permissions, assignments, and the business's configuration.
• Infrastructure and operations: to providers that support hosting, databases, file storage, email delivery, error handling, security, and related technical operations. File storage may use local infrastructure or Cloudflare R2, depending on deployment configuration.
• Public-site analytics: to Google Analytics when an analytics identifier is configured for the public website.
• Business-enabled integrations: to connected services, AI providers, email servers, webhook destinations, and logistics services when a business enables a feature or asks us to transmit information.
• Legal and safety reasons: when reasonably necessary to comply with law or legal process, respond to lawful requests, enforce agreements, investigate fraud or security incidents, or protect rights and safety.
• Business changes: as part of a merger, financing, acquisition, reorganization, sale of assets, or similar transaction, subject to appropriate confidentiality and legal requirements.
• At your direction: when you request an export, send a message, publish information, configure forwarding, or otherwise direct us to disclose information.

7. Integrations and AI Services

Intellus Tech can connect to WhatsApp, Facebook, Instagram, Shopify, Gmail, Outlook, IMAP/SMTP mailboxes, business-configured webhooks, and other enabled services. When a business connects a service, Intellus Tech may exchange account details, customer information, messages, attachments, orders, catalog data, delivery information, and other content required for that integration. Each provider processes information under its own terms and privacy practices.

AI features may use OpenAI, Anthropic, Google, Ollama, Ollama Cloud, LM Studio, or another compatible endpoint selected or configured by Intellus Tech or the business. Prompts, conversation context, text, images, knowledge content, and related instructions may be sent to the selected provider to generate a response or embedding. Intellus Tech records provider, model, usage, latency, status, and error information for administration and reporting. Self-hosted providers may process information on infrastructure controlled by the business or its chosen operator.

Disconnecting an integration stops future access using the disconnected credentials, but it does not automatically remove information previously imported, sent, or required for business records. A business should review the provider's own controls if it also wants information removed from that provider.

8. International Processing

Intellus Tech and the providers selected by us or a business may process information in countries other than the country where the individual or business is located. Those countries may have different data-protection rules. We use reasonable contractual, organizational, and technical measures appropriate to the service and require businesses to consider transfer requirements when choosing their own integrations and providers.

9. Data Retention

We retain information for as long as reasonably needed to provide and secure the platform, maintain the relevant account or business relationship, support business records and available exports, resolve disputes, enforce agreements, and comply with legal, tax, accounting, fraud-prevention, or security obligations. Retention periods vary according to the type of information, the business's use of the platform, and why the information is held.

When information is no longer required, we may delete or anonymize it. Deletion requests may be limited where information must be retained for legitimate business records, security, legal claims, or applicable law. Disconnecting an integration, removing a user from a business, or ending a subscription does not by itself require immediate deletion of all associated business records.

10. Data Security

We use reasonable safeguards designed to protect information, including access controls, tenant and permission checks, password hashing, encrypted storage for selected integration credentials and API keys, transport security in production, session controls, trusted-device management, optional two-factor authentication and passkeys, and activity or security logging. No system, storage method, or transmission is completely secure, and we cannot guarantee that unauthorized access or loss will never occur.

Business customers are responsible for choosing appropriate permissions, protecting their credentials and integration keys, reviewing members and sessions, securing exported files, and promptly reporting suspected unauthorized access.

11. Rights and Choices

Depending on your relationship with Intellus Tech and applicable law, you may ask to access, correct, or delete personal information; object to or restrict certain processing; withdraw consent; or receive information in an available export format. Account holders can update profile and security information in the platform. Business owners can manage members, permissions, integrations, activity records, and business settings, and may delete a business through available controls. Feature-specific exports are available for certain records, but Intellus Tech does not promise that every category can be exported in one complete portable file.

To make a request concerning your Intellus Tech account, email support@intellustech.com. We may need to verify your identity and authority before acting. If your information was entered by a business using Intellus Tech, contact that business first; we will assist the business where appropriate. We may deny or limit a request when permitted or required by law or where it would adversely affect another person's rights.

12. Cookies and Local Storage

Intellus Tech uses browser storage for the following purposes:

• Authentication and active-business cookies that keep you signed in and select the workspace being used.
• Theme cookies that remember primary and neutral colour preferences.
• A trusted-device cookie, when selected during two-factor authentication, that can remember the device for a limited period.
• Session storage used during registration and verification to preserve intended redirects or setup information.
• IndexedDB storage used by the inbox outbox to hold queued message text and files on the user's device until sending succeeds or the record is removed.
• Google Analytics technologies on public pages when analytics is configured.

Browser controls can clear or block cookies and local storage, but doing so may sign you out, remove preferences or queued offline messages, or prevent parts of the platform from working correctly. Google also provides controls and browser tools for limiting Google Analytics collection.

13. Public Pages and Third-Party Links

Intellus Tech provides public contact, review, label, and shipment-tracking pages. Information entered on those pages may be delivered to the relevant business and stored with its records. Public tokens and tracking identifiers should be treated as sensitive links and shared only with intended recipients. Public pages may also contain links to external services. Intellus Tech does not control the privacy or security practices of third-party websites and recommends reviewing their policies before providing information.

14. Children's Privacy

Intellus Tech is intended for businesses and adult authorized users. It is not directed to children under 18, and children may not create accounts. If you believe a child has provided personal information directly to Intellus Tech without appropriate authorization, contact us so we can review and address the matter.

15. Changes to This Policy

We may update this Privacy Policy as the platform, integrations, or legal requirements change. We will post the revised policy with a new "Last updated" date. When a change materially affects how account or business information is handled, we may also provide notice through the platform or the email address associated with the account.

16. Contact

For questions, privacy requests, or concerns about this policy, email support@intellustech.com or use our contact form. Please do not send passwords, API keys, or other sensitive credentials in your request.