1. Introduction

ZEVRINA ECOMMERCE SERVICES - FZCO ("Boostolog", "we", "us", "our") is a company registered in Dubai Silicon Oasis, Dubai, United Arab Emirates under IFZA trade licence no. 78768. This Privacy Policy explains how your personal data is collected, used and protected when you use the boostolog.com website and the Boostolog platform (the "Service"). By using the Service you are deemed to have accepted this Privacy Policy.

2. Data We Collect

2.1 Information You Provide Directly • First and last name • E-mail address • Password (stored encrypted with bcrypt) • Payment details (only through our payment processor; card numbers are never held on our systems) 2.2 Data Received Through the Etsy Connection • Etsy shop name and shop ID • Titles, descriptions, tags and images of the listings in your own shop • OAuth access token (stored only on our servers, never sent to your browser) We only receive data from the shop you connect yourself. We do not collect shop or listing data of other sellers. We do not access your sales, order or buyer data. 2.3 Data Received Through the Shopify Connection • Product titles, descriptions and images • Price information • Stock information 2.4 Automatically Collected Data • IP address (for security and fraud prevention) • Browser type and version • Usage statistics (which features are used) • Session data

3. How We Use Your Data

• Service Delivery: to analyse your own listings, suggest rewrites, translate them and generate images • Account Management: to create and manage your account • Communication: for important updates, security notices and support • Improvement: to improve platform features (using anonymous and aggregated data) • Security: to detect and prevent unauthorised access • Billing: for subscription and payment processes We never sell your data to third parties.

4. Data Security

We use industry-standard security measures to protect your data: • SSL/TLS Encryption: all data transmission is encrypted • Password Storage: passwords are hashed with bcrypt and never kept in plain text • Token Storage: Etsy and Shopify access tokens are kept only on our servers and are never sent to your browser • Servers: the service runs on the servers of a hosting provider located in Türkiye • Access Control: only authorised personnel can access personal data

5. Data Retention Periods

• Account Data: for as long as your account is active, plus 30 days after the account is deleted • Payment Records: 5 years, as required by law • Log Data: 90 days • OAuth Tokens: until the token expires or the connection is revoked • Etsy Data: when you disconnect Etsy, the data received from that shop (listing content, analysis history and tokens) is deleted When you delete your account, your personal data is permanently erased from our systems within the periods stated above.

6. Your Rights

Under the GDPR and applicable data protection legislation you have the following rights: • Right of Access: you may request the data we hold about you • Right to Rectification: you may ask for inaccurate data to be corrected • Right to Erasure: you may request that your data be deleted (the "right to be forgotten") • Right to Portability: you may request your data in a machine-readable format • Right to Object: you may object to certain processing purposes • Right to Restriction: you may request that processing be restricted To exercise these rights, write to destek@boostolog.com.

7. Cookies

The platform uses cookies for session management. For detailed information about our use of cookies, please see our Cookie Policy.

8. Third-Party Integrations

Etsy: Authorisation is carried out through Etsy's OAuth 2.0 system. Etsy's own privacy policy applies. Data we receive from Etsy is used only to provide the service to you; it is not sold or shared for advertising. Shopify: The connection is established through the Shopify Admin API. Shopify's own privacy policy applies. Anthropic (Claude AI): To produce suggestions, your listing text (title, description, tags) and the product images you select are sent to Anthropic's API. Anthropic may retain this content for a limited period under its own policies; under its commercial terms it does not use it to train models. kie.ai: For image generation, the product photo you select and the product title are sent. Cloudflare: Requests to Etsy are relayed through Cloudflare infrastructure when needed. Brevo: Your e-mail address is used to send account and service e-mails. Stripe: When payments are taken, they are processed by Stripe; your card details never reach us. Google Ads and Meta: Page views and sign-up events are shared for advertising measurement. Data belonging to your Etsy shop is not sent to these services.

9. Contact

For questions about this Privacy Policy: ZEVRINA ECOMMERCE SERVICES - FZCO Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, UAE Licence No: 78768 E-mail: destek@boostolog.com Phone: +90 538 820 53 10