Privacy policy

Who is responsible

POOLI SINGLE MEMBER P.C. (“Pooli”, “we”) is the data controller for seller account data and site operations. For buyer checkout fields, you (the seller) are the controller of your customers’ data; Pooli processes that data on your instructions to run checkout and notifications.

What we collect

Seller accounts: email, name, password hash, session cookies, wallet addresses you register, orders, payment status, notification preferences, and Telegram connection metadata when you enable it. Buyer checkout: fields you configure (for example name, phone, email, address). Payments: public blockchain transfer metadata (amounts, addresses, transaction references) needed to verify payment. Technical: server logs, rate-limit counters, and coarse product analytics events without payment addresses or buyer PII in analytics payloads.

Analytics

Checkout friction analytics are privacy-oriented: event names like checkout_opened or payment_detected with coarse properties. We strip keys that look like addresses, hashes, phone, email, or names. There is no third-party ad tracker in the open-source web app; if you wire a sink via window.pooliAnalytics, that is under your deployment.

Cookies

Essential cookies/local storage for login sessions, locale (pooli_locale), and theme (pooli_theme). No marketing cookie banner is required for those alone.

Processors and hosting

We use infrastructure and service providers needed to run Pooli (hosting, email delivery such as Resend, Telegram Bot API, blockchain RPC providers such as TronGrid for TRON). Providers process data under our instructions.

Retention

We keep operational data while your account is active and as needed for disputes, fraud prevention, and legal obligations. Merchant-scoped buyer records can be isolated on request; export and automated deletion tooling is still being built.

Your rights

If you are in the EU/EEA, you may have rights to access, rectify, erase, restrict, object, and port personal data, and to withdraw consent where processing is consent-based. Contact support@pooli.shop. You may lodge a complaint with the Hellenic Data Protection Authority.

International transfers

Data may be processed in the EU and where our hosting providers operate. We use appropriate safeguards where required by law.

Contact

Privacy questions: support@pooli.shop.