Privacy Policy

DumaGo ("we", "our", or "us") operates the DumaGo application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

1.1 Account Information

• Authentication Data: We use Auth0 for authentication. When you sign in, we receive your email address and a unique identifier from your identity provider.
• Marketplace Account Links: If you connect marketplace accounts (eBay, TikTok Shop, Amazon, Etsy, or Facebook Shops), we store OAuth tokens (encrypted) that allow us to manage listings on your behalf. We do not store your marketplace passwords.

1.2 Photos and Media

• Uploaded Photos: When you upload photos of items, we store them temporarily to generate AI-powered listing descriptions, detect and crop individual items, and post to connected marketplaces (eBay, TikTok Shop, Amazon, Etsy, Facebook Shops) on your behalf.
• Retention: Photos are stored for 30 days after upload, then automatically deleted. Photos associated with active marketplace listings are retained while the listing is live.

1.3 Listing Data

• Generated Content: AI-generated titles, descriptions, prices, and category suggestions
• User Edits: Any modifications you make to generated listings
• Listing History: Records of listings created and posted through our Service

1.4 Usage Analytics

• Service Usage: Pages visited, features used, and errors encountered
• Device Information: Browser type, operating system, and device type
• IP Address: Used for rate limiting and abuse prevention (not logged permanently)

2. How We Use Your Information

We use your information to:

• Provide the Service: Generate listings, post to connected marketplaces, and manage your inventory
• Improve the Service: Analyze usage patterns to enhance features and fix bugs
• Communicate: Send important updates about your account or the Service
• Prevent Abuse: Detect and prevent fraudulent or malicious activity

3. Information Sharing

We share your information only as follows:

3.1 Marketplace Platforms

When you connect marketplace accounts and post listings, we share listing data (title, description, photos, price, condition, and category) with the respective platforms. We currently integrate with:

• eBay — Product listings via the eBay Browse/Sell APIs
• TikTok Shop — Product listings via the TikTok Shop Seller APIs
• Amazon — Product listings via the Amazon Selling Partner API
• Etsy — Product listings via the Etsy Open API
• Facebook Shops — Product listings via the Facebook Commerce APIs

Data is shared with each platform only when you explicitly connect your account and initiate a listing action. We do not share data with platforms you have not connected.

3.2 TikTok Shop — Data Usage Disclosure

When you connect your TikTok Shop account, the following applies:

• We use TikTok Shop APIs solely to create, update, and deactivate product listings on your behalf.
• We access your TikTok Shop authorized information only to identify which shop to associate with your Dumago account.
• We do not use TikTok Shop customer data, order data, or seller data for marketing, advertising, data brokerage, or any purpose beyond providing the listing management service you have requested.
• We do not sell, license, or trade any data obtained from TikTok Shop APIs to third parties.
• TikTok Shop OAuth tokens are encrypted at rest and are deleted immediately when you disconnect your TikTok Shop account or delete your Dumago account.

3.3 Service Providers

We use third-party services that may process your data:

• Auth0: Authentication and identity management
• Google Cloud (Gemini API): AI processing for listing generation
• Hosting Provider: Infrastructure and data storage

3.4 Legal Requirements

We may disclose your information if required by law or to protect our rights.

4. Data Security

We implement appropriate security measures including:

• Encryption: OAuth tokens for all marketplace platforms are encrypted at rest using industry-standard encryption
• HTTPS: All data in transit is encrypted
• Access Controls: Only authorized personnel can access user data
• Audit Logging: Security-relevant events are logged for incident investigation

5. Data Retention

6. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Delete: Request deletion of your account and associated data
• Disconnect: Remove any marketplace connection (eBay, TikTok Shop, Amazon, Etsy, Facebook) at any time
• Export: Download your listing data

To exercise these rights, use the Settings page in the app.

7. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the app or sending an email.

9. Contact Us

If you have questions about this Privacy Policy, please contact us through the app.