Mallnest Business privacy policy

1. Who we are

Mallnest Business is an application developed and published by ImagoStack (“we”), operating from Argentina. For any privacy enquiry you can write to us at support@imagostack.com.

2. What data the application handles

The app handles only the information you enter so that it can work. In detail:

• Account data. Your email address and name, to create your account and sign in, with email or with Google. It is stored on our servers.
• Connection to your Shopify store. Your store's address and the access permission you grant when connecting it, to show your products in Mallnest. The permission is stored only on our server, never on the phone. It is stored on our servers.
• Your shop's configuration. Name, tagline, category, logo, colors, banners and featured collections, shown publicly in Mallnest once your store is approved. It is stored on our servers.

We do not use that data to show advertising, we do not sell it or share it with third parties beyond the providers listed in section 5, and we do not build user profiles or track you across apps.

3. Where your data is stored

Some information is processed on our own servers or on those of infrastructure providers contracted by ImagoStack, with security measures appropriate to the type of data.

When you ask for AI text suggestions, your store's name, category and texts are sent to Google's Gemini API through our server; neither ImagoStack nor the app keeps a copy of that request. If that service is unavailable, you write the texts yourself. To delete your account and your shop's configuration, write to support@imagostack.com from your account's email.

If you back up your phone, the operating system may include the app's data in that backup. That backup is managed by Google or by your device manufacturer under their own policies, not by ImagoStack.

For how long. We keep the information for as long as it is needed to provide the service. When it is no longer needed, or if you ask us to delete it, we erase it —unless a legal obligation requires us to retain some data for a set period, and only for that period.

4. Permissions the app requests

Mallnest Business requests no sensitive Android permissions: no camera, no microphone, no location, no contacts and no external storage.

5. Sharing information with third parties

So that some features can exist, the app uses the following third-party services, which may process data under their own policies:

• Amazon Web Services (Cognito, Lambda, DynamoDB, S3). To sign in and store your account, your store connection and your shop's configuration. See their privacy policy.
• Shopify. To connect your store and read your products and collections with the permission you grant. See their privacy policy.
• Google Gemini (API). To generate text suggestions for your shop. Google processes that text under its own service terms. See their privacy policy.

We may disclose information only where a competent authority requires it through a valid legal order.

The providers named above may process that information on servers located outside your country, under the safeguards set out in their own policies and in the legal frameworks that apply to them.

Under no circumstances do we make automated decisions that affect you, nor do we build user profiles.

6. Content you share yourself

If you use a feature of the app to share content (for example, sending an image or a summary by messaging), that sending is done by you through the application you choose. ImagoStack does not take part in that content and keeps no copy of it.

7. Minors

Mallnest Business is not directed at children under 13 and does not knowingly collect data from minors. Because of the type of content, we recommend it for ages 18 and over. If you believe a minor has given us information, write to support@imagostack.com and we will delete it.

8. How to delete your data

You can request the deletion of your data by writing to support@imagostack.com. We process the request within 30 days.

More details on the data deletion page.

9. Your rights

Under the regulations that apply to you —the GDPR if you are in the European Union, the LGPD in Brazil, Personal Data Protection Law 25.326 in Argentina, or whichever governs in your country— you have the right to access your data, rectify it, erase it, restrict it or object to its processing. Write to us to exercise them.

Legal basis. We process the information in order to provide the service you request and, depending on the case, on the basis of your consent or of our legitimate interest in keeping the application running and preventing abuse.

If you believe we did not handle a request properly, you have the right to lodge a complaint with the supervisory authority of your country of residence: for example, the Garante per la protezione dei dati personali in Italy, the Spanish Data Protection Agency in Spain, the National Data Protection Authority in Brazil, or the Agency for Access to Public Information in Argentina.

10. Security

We apply reasonable technical measures to protect information, including the use of the operating system's private storage. No method is infallible, but we minimise the risk with the simplest strategy: not accumulating data we don't need.

11. Changes to this policy

If we update this policy, we publish the new version at this same address and change the date in the header. If the change is significant, we announce it inside the app.

12. Contact

ImagoStack — Argentina. Support and privacy: support@imagostack.com.