Privacy policy
EJO respects customer privacy and uses personal data only for clear marketplace purposes: customer accounts, order processing, delivery, support, fraud prevention, service improvement, marketing preferences, and legal compliance.
Data we collect
We may collect name, email address, mobile number, delivery address, location selected by the customer, order history, cart and wishlist data, refund and support requests, payment status, wallet and loyalty activity, device and session information, and communication preferences.
Vendors and administrators may provide business contact details, store information, documents needed for verification, bank or payout information, product data, marketing assets, and integration credentials that they choose to configure.
How we use data
Data is used to create and secure accounts, confirm orders, calculate shipping and tax, coordinate delivery, send service notifications, process refunds, operate wallet and loyalty features, provide support, improve search and recommendations, and maintain marketplace safety.
Google user data
When a customer signs in with Google, EJO requests the minimum Google OAuth scopes needed for sign-in: openid, email, and profile. The Google user data accessed may include the Google account identifier, email address, display name, profile photo, and basic profile information returned by Google.
When an authorized EJO administrator connects a YouTube channel for marketing tools, EJO requests YouTube permissions needed to upload and manage the content the administrator chooses to publish, including youtube.upload and youtube.force-ssl. The Google user data accessed may include the connected Google account or YouTube channel identifier, channel title, OAuth access and refresh tokens, upload or publishing status, and metadata for videos or posts created through EJO.
How Google user data is used
Google sign-in data is used only to authenticate the customer, create or link the EJO customer account, show the customer profile, protect the account, and provide customer support.
YouTube and Google OAuth data is used only to connect the authorized EJO channel, publish EJO marketing videos or posts selected by an administrator, display publishing status, and retry or troubleshoot publishing actions requested by the administrator.
Google Maps and Places services may be used for address selection, location search, delivery support, store location display, and store lead search. These services process the address, place, or location information entered or selected by the user or administrator. EJO does not use Google Maps or Places to access a user's Google account data.
Storage, sharing, and retention
EJO stores required account, order, profile, OAuth, and integration data in its secured production systems hosted on Azure and PostgreSQL. OAuth tokens are stored server-side and are used only to call the Google APIs required for the connected feature.
EJO does not sell Google user data and does not share it with advertisers or data brokers. Google user data is shared only with Google APIs to provide the requested feature, with service providers that help operate EJO under confidentiality and security obligations, or when required by law.
EJO retains Google user data only for as long as needed to provide the connected service, satisfy security or legal requirements, or until the user revokes access or requests deletion.
Limited Use and AI training
EJO's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. EJO does not use Google user data to train generalized AI or machine learning models.
User control and deletion
Users can request account and data deletion from the EJO data deletion page, contact EJO support, or revoke Google access from their Google Account permissions page. After revocation or deletion, EJO stops using the related Google tokens and removes or anonymizes data according to applicable legal and operational requirements.
Information is shared only when needed to complete an order, operate marketplace services, comply with legal requirements, or protect users and the platform.