1. Introduction

ZEVRINA ECOMMERCE SERVICES - FZCO ("Boostolog", "we", "us", "our") is a company registered in Dubai Silicon Oasis, Dubai, United Arab Emirates under IFZA trade licence no. 78768. This Privacy Policy explains how your personal data is collected, used and protected when you use the boostolog.com website and the Boostolog platform (the "Service"). By using the Service you are deemed to have accepted this Privacy Policy.

2. Data We Collect

2.1 Information You Provide Directly • First and last name • E-mail address • Password (stored encrypted with bcrypt) • Payment details (only through our payment processor; card numbers are never held on our systems) 2.2 Data Received Through the Etsy Connection • Etsy shop name and shop ID • Listing titles, descriptions and tags • Sales statistics (for analysis purposes only) • OAuth access token (stored encrypted) 2.3 Data Received Through the Shopify Connection • Product titles, descriptions and images • Price information • Stock information 2.4 Automatically Collected Data • IP address (for security and fraud prevention) • Browser type and version • Usage statistics (which features are used) • Session data

3. How We Use Your Data

• Service Delivery: to carry out listing optimisation, keyword research and competitor analysis • Account Management: to create and manage your account • Communication: for important updates, security notices and support • Improvement: to improve platform features (using anonymous and aggregated data) • Security: to detect and prevent unauthorised access • Billing: for subscription and payment processes We never sell your data to third parties.

4. Data Security

We use industry-standard security measures to protect your data: • SSL/TLS Encryption: all data transmission is encrypted • Encrypted Storage: passwords are hashed with bcrypt, tokens are encrypted with AES-256 • Secure Servers: ISO 27001 certified infrastructure in Dubai Silicon Oasis • Access Control: only authorised personnel can access personal data • Regular Audits: our security systems are audited regularly

5. Data Retention Periods

• Account Data: for as long as your account is active, plus 30 days after the account is deleted • Payment Records: 5 years, as required by law • Log Data: 90 days • OAuth Tokens: until the token expires or the connection is revoked When you delete your account, your personal data is permanently erased from our systems within the periods stated above.

6. Your Rights

Under the GDPR and applicable data protection legislation you have the following rights: • Right of Access: you may request the data we hold about you • Right to Rectification: you may ask for inaccurate data to be corrected • Right to Erasure: you may request that your data be deleted (the "right to be forgotten") • Right to Portability: you may request your data in a machine-readable format • Right to Object: you may object to certain processing purposes • Right to Restriction: you may request that processing be restricted To exercise these rights, write to destek@boostolog.com.

7. Cookies

The platform uses cookies for session management. For detailed information about our use of cookies, please see our Cookie Policy.

8. Third-Party Integrations

Etsy: Authorisation is carried out through Etsy's OAuth 2.0 system. Etsy's own privacy policy applies. Shopify: The connection is established through the Shopify Admin API. Shopify's own privacy policy applies. Anthropic (Claude AI): AI processing is used for listing optimisation. Your content is sent to Anthropic's servers anonymously and is not stored.

9. Contact

For questions about this Privacy Policy: ZEVRINA ECOMMERCE SERVICES - FZCO Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, UAE Licence No: 78768 E-mail: destek@boostolog.com Phone: +90 538 820 53 10