Privacy Policy

MerchandiserOS is an AI operating system for apparel merchandising, provided by Xelerate Business Solutions ("we", "us", "our") of New Cairo, Egypt. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights you have. By using our website or the MerchandiserOS service, you agree to the practices described here.

1. Who this covers

This policy applies to:

• Site visitors — anyone browsing our public website or submitting a sales enquiry.
• Trial and paying customers — the businesses that create a workspace to use MerchandiserOS.
• Team users — the individual staff members a customer invites into its workspace (owners, merchandisers, sourcing, planners, QA, floor staff, and connected suppliers).

2. Data we collect

• Contact and sales enquiries — your name, work email, phone number, company, and the message you send us when you request access or contact sales.
• Account data — your name, email address, a securely hashed password, and your assigned role in the workspace.
• Business data you enter — the operational records you create in the app: orders, styles and tech packs, materials, suppliers, costs and quotations, production and floor data, quality and inspection records, and related documents and images you upload.
• Usage and analytics — basic technical information such as pages viewed, actions taken, device and browser type, and approximate location from your IP address, used to keep the service reliable and to improve it.
• Cookies and local storage — we use essential cookies needed to run the service (such as your signed session) and preference storage (such as your chosen interface language, saved in your browser's localStorage). We do not use advertising cookies.
• Integration data — where you choose to connect an external service, we process the data that connection provides. For example: read-only, allow-listed email monitoring (only messages from senders you approve), and shop-floor production data from Garment.io (order-scoped piece counts and status, never monetary amounts).

3. AI processing

MerchandiserOS uses artificial intelligence to help you work faster. When you choose to run an AI task — such as extracting a tech pack, drafting a supplier or buyer message, or asking the assistant a question — the relevant records are sent to our AI provider, Anthropic (Claude), to perform that task and return a result.

• The output is always a draft or estimate that you review before it is used or sent — nothing is sent automatically on your behalf.
• Your business data is not used to train third-party AI models.
• AI is only invoked for the specific task you trigger; we do not continuously feed your data to the model.

4. How we use data

• To provide, operate, secure, and maintain the MerchandiserOS service and your workspace.
• To respond to your sales enquiries and support requests.
• To run the AI features you trigger and to return their drafts and estimates.
• To improve the reliability, performance, and usefulness of the product.
• To send you essential service communications (such as account, security, or billing notices).
• To comply with legal obligations and to protect our rights and users.

5. Sharing and sub-processors

We do not sell your personal or business data. We share data only with the service providers who help us run MerchandiserOS, under agreements that require them to protect it:

• Vercel — application hosting.
• Turso — the database that stores your workspace, with per-customer workspace isolation so one customer's data is kept separate from another's.
• Anthropic — the AI provider that processes the specific records you submit to an AI task (see section 3).

We may also disclose data where required by law, to enforce our terms, or to protect the safety of our users and the public.

6. Retention

We keep your business data for as long as your workspace is active. If you close your account, we retain data only as long as needed to complete the closure, meet legal or accounting obligations, and resolve disputes, after which it is deleted or anonymised. Sales enquiry data is kept for a reasonable period to follow up and then removed on request.

7. Security

We protect your data with industry-standard measures, including hashed passwords, signed sessions, role-scoped access so users only see what their role permits, per-customer workspace isolation, and encrypted transport (HTTPS) for data in transit. No system is perfectly secure, but we work to keep your data safe and to respond promptly to any incident.

8. Your rights

Consistent with applicable data-protection law (including the principles of the GDPR), you may request to:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Export your data in a portable format.
• Delete your data, subject to our legal retention obligations.

To exercise any right, contact us at mos@merchandiseros.online.

9. International transfers

MerchandiserOS is operated from Egypt. Because our hosting, database, and AI sub-processors may operate outside Egypt, your data may be processed abroad. Where that happens, we rely on those providers' safeguards to keep your data protected to a standard consistent with this policy.

10. Children

MerchandiserOS is a business tool and is not intended for anyone under 16. We do not knowingly collect data from children.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "last updated" date above and, where appropriate, notify you through the service.

12. Contact

Questions or requests about your data? Contact us at mos@merchandiseros.online.
Xelerate Business Solutions — New Cairo, Egypt.