How we handle your details

Who we are

Jeff Francis, trading as Endcap Labs (ABN 14 826 718 434), Melbourne, Victoria. Contact: privacy@endcaplabs.com.au.

What we keep about you, and why

• Your name and email, so you can sign in and your team can see who did what.
• Your passkey’s public key. Your fingerprint or face never leaves your device.
• Your sign-in sessions, with the device and IP address used, for security. Briefly (a day), the IP addresses of sign-in attempts, to stop abuse.
• What you do in the account, in the shop’s activity log (including changes to the business details).
• If you accept the service agreement for your shop: your name, email, the time, and your device and IP address, as proof of the agreement.
• If your shop connects an email account: the address, and a locked (encrypted) permission from Google or Microsoft, or an app password for other email services, that lets Endcap send the emails your shop asks it to send. We can’t read the mailbox. Everyone in your shop can see which address is connected, and the activity log records who connected or disconnected it. If you press “Send a test email”, it goes to your own address through that account, and the log notes that one was sent (not what it said).

We keep these for the shop you work with: the shop controls its account.

Where it’s kept

In Sydney, Australia: our database is run by Supabase and our servers by Fly.io, both United States companies using their Sydney data centres. Cloudflare (also a US company) carries traffic between you and our servers; it may pass through its servers outside Australia but doesn’t store your details. If we email you an invite, it goes through Microsoft 365, our business email. We don’t sell your details or use them for marketing.

Services your shop connects. If your shop connects its email or online store, we send and fetch through that service, which may be outside Australia: Google (Gmail, United States), Microsoft (Outlook and Microsoft 365, United States), Shopify (Canada), Square (United States), your shop’s own WooCommerce website (wherever it’s hosted), or the email service your shop picks (for example Apple iCloud, Yahoo or AOL in the United States, or Zoho in Australia). Emails sent this way go through your shop’s own account, and a copy stays in its Sent folder. From stores we read only products, prices, stock, photos and page addresses, never customers or orders.

Google user data

When you connect Gmail, Endcap uses Google’s permission only to send the emails your shop asks it to send, from your address, and to learn which address it is. We don’t read your mail, keep the emails we send, sell this data, use it for advertising, or use it to train AI, and no person at Endcap looks at it. Endcap’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The same applies to Microsoft: we use its permission only to send your shop’s emails and to learn the address.

Who can see it

Your shop’s team sees your name and role; its owners also see your email. Endcap staff see a shop’s data only in a support session the shop has allowed: time-limited, with a written reason the shop can see, and recorded in the shop’s activity log. Without a session, people at Endcap reach it only for essential database maintenance, to investigate a security incident, or when the law requires, and we record why.

How long we keep it

• Old sign-in sessions: deleted 30 days after they expire. Invites: 30 days after they’re used or run out.
• If you’re no longer in any shop’s team, your account is deleted after 30 days; the activity log then shows “Former team member”.
• Spreadsheets your shop imports aren’t kept at all, only the products in them.
• Connections: until your shop disconnects them or leaves Endcap, then deleted (backups roll off within 30 days). Disconnecting also cancels our access at Google, Shopify and Square.
• The activity log: while the account is open, and up to 2 years after. Agreement acceptance records: up to 7 years.
• If a shop leaves Endcap, its data is deleted as its agreement says.

Your choices

You can change your name any time in Settings. To use a different email, ask your shop’s owner to invite the new address. You can ask to see or correct anything else we hold about you: usually the quickest way is through your shop’s owner, who controls the account, or write to privacy@endcaplabs.com.au and we’ll reply within 30 days. If you’re unhappy with how we’ve handled it, you can contact the Office of the Australian Information Commissioner (oaic.gov.au).