Privacy Policy

Who we are

OhoSync is operated by Monine AS, a company registered in Norway (org. no. 926 029 215) ("Monine", "we", "us"). We are the controller for your account data and act as a processor for the store and product data you sync through the Service, which you control. This policy explains what personal data we process and why.

Data we process

• Account data: your name, email address and a hashed password.
• Store connection data: your store URL and API credentials, stored encrypted at rest.
• Operational data: supplier feed configuration, product records, sync history, billing records and audit logs.
• Technical data: IP address and basic request metadata, used for security, rate-limiting and abuse prevention.

How and why we use it

We process this data to provide the Service — authenticating you, connecting to your store, running syncs, billing your subscription, and notifying you of failures — and to keep the Service secure. We do not sell your data or use it for advertising.

Legal basis (GDPR)

We rely on: performance of a contract (to provide the Service you sign up for); legitimate interests (securing the Service and preventing abuse); consent where required (for example, optional analytics cookies); and legal obligation (for example, retaining invoicing records).

Your rights (GDPR)

You have the right to access, rectify, export (portability) and erase your personal data, to restrict or object to processing, and to lodge a complaint with your supervisory authority (in Norway, Datatilsynet). You can exercise the core rights yourself in the app:

• Export your data — Account → Export your data downloads a machine-readable copy of your account and tenant data.
• Delete your account — Account → Delete account permanently removes Your Data, except records we must keep by law.

You can also contact us at hello@ovanap.no to exercise any of these rights.

Retention

We keep your data for as long as your account is active. Operational logs (such as sync run history) are trimmed on a rolling schedule. Financial records (billing and subscription history) and security audit logs are retained for as long as required to run the business and to meet legal obligations. When you delete your account, Your Data is removed except where retention is legally required.

Sub-processors and transfers

We use a small number of vetted sub-processors to run the Service: Stripe (payment processing), Resend (transactional email) and Hetzner (cloud hosting). Where data is transferred outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

Cookies

We use strictly necessary cookies to keep you signed in. Any optional analytics cookies are only set with your consent, which you can change at any time.

Contact

Monine AS, Norway — org. no. 926 029 215 — hello@ovanap.no.