1. The Data We Process
As an enterprise retail operating system, RetailCoder processes vast amounts of operational data on your behalf. This includes product catalogs, inventory ledgers, shipping manifests, and end-customer Personal Identifiable Information (PII) such as shipping addresses, email addresses, and phone numbers required for order fulfillment.
We do not process or store raw credit card information. All payment processing is securely delegated to your connected gateways (e.g., Stripe, Razorpay) via PCI-DSS compliant tokenization protocols.
2. Cloud Infrastructure
Your data resides in heavily secured AWS and Cloudflare environments. For our standard tiers, data is logically isolated within a multi-tenant PostgreSQL cluster. For our Enterprise tiers, data resides in a physically isolated, single-tenant Virtual Private Cloud (VPC) with dedicated encryption keys.
3. Zero Data Brokering
This is a foundational principle of RetailCoder: We do not sell, rent, or aggregate your data. Many 'free' or low-cost ecommerce platforms secretly aggregate merchant data to build 'industry benchmarks' or sell consumer shopping habits to advertising networks. RetailCoder explicitly forbids this practice in our engineering culture and legal agreements. Your data is used exclusively to operate your specific software instances.
4. PII Encryption
All data in transit is secured via TLS 1.3. All data at rest is encrypted using AES-256. Highly sensitive PII (such as end-customer physical addresses) is subject to column-level encryption within our database. Even if a RetailCoder database administrator were to query the raw database, they would not be able to read your customers' addresses without the application-level decryption keys.
5. Compliance (GDPR & DPDP)
RetailCoder provides out-of-the-box API endpoints to assist merchants in complying with global privacy laws, including the European GDPR and the Indian Digital Personal Data Protection (DPDP) Act. You can programmatically trigger a `data.erasure` webhook which will securely redact a specific customer's PII from the RC:OMS ledger within milliseconds, while preserving the anonymized financial transaction for your accounting records.
6. Sub-processors
To provide our service, we rely on a carefully vetted list of sub-processors (e.g., AWS for hosting, Vercel for edge computing, Postmark for transactional emails). We maintain strict Data Processing Agreements (DPAs) with each of these vendors ensuring they adhere to the same stringent security standards we enforce internally.