Privacy Policy

This policy applies to personal information collected through:

• Our website, olympasapps.com and its subdomains.
• The Goúri storefront app for Android, published by Olympas LLC on Google Play (the “App”). The App is the shopping app for a business that runs its store on Goúri. An iOS version is in preparation and is not yet released.
• The Goúri platform, including the ERP, point of sale, and connected storefronts (together with the App and our website, the “Services”).

Businesses that use Goúri, and the people they serve

Goúri is used by businesses (“Merchants”) to run their operations and to sell to their own customers. When you shop with, work for, or supply a Merchant through Goúri, that Merchant decides what information is collected about you and why. For that information, the Merchant is the controller (or “business”) and Olympas is its processor (or “service provider”). We handle it only on the Merchant’s instructions, under our Data Processing Addendum.

The App is white-label. Each Merchant can have its own branded build of the same app, under its own name and icon, and a single download link can set the app up for the Merchant you are buying from. Whichever build you use, the app you are shopping in belongs to one Merchant, and your orders, reviews, and support messages go to that Merchant.

Inside the App, the Privacy Policy, Terms, Support Policy, and Return Policy pages are published by the Merchant from the ERP and describe that Merchant’s own practices for its goods and its customers. This policy describes what Olympas does as the company that operates the platform behind it.

You can browse without an account

You can open the App, browse products, search, read reviews, build a cart, and keep a wishlist or comparison list without creating an account. Those lists are held on your own device. You need an account to place an order and to use orders, addresses, support tickets, and profile settings.

Information you provide

• Account information: full name, email address, country and mobile number, and a password, which we store only as a salted hash. Registration is confirmed with a six-digit code sent to your email.
• Addresses: the delivery and billing addresses you save, each labeled Home, Work, or Other.
• Order information: items purchased, variations, quantities, prices and taxes, invoice and payment records, and any note you add for the Merchant at checkout.
• Reviews and ratings: the rating, tags, and comment you submit for a product you bought. These are published publicly, as explained below.
• Support tickets: the subject and description of a ticket, including the issue type and details when you use Need help with this order.
• Cancellation requests: the reason you select and any note you add, up to 500 characters.
• Profile photo: if you choose to add one, the image you take or select, and any crop or rotation you apply before it is uploaded.
• Website inquiries: if you contact us, request a demo, or start a trial on our website, your name, email address, phone number, company name, and the contents of your message.

Information collected automatically

• Server logs: when the App or website connects to our servers, those servers record the request, the date and time, the IP address it came from, and basic technical details sent by your device, such as the operating system and app version. We use these logs to run the service, investigate errors, and protect against abuse.
• Session tokens: a short-lived sign-in token is stored on your device and renewed in the background so you are not signed out while you are using the App.
• On-device storage: your cart, wishlist, comparison list, selected store branch, and cached catalogue pages are kept on your device so the App opens quickly. Cached catalogue data is kept for up to seven days.

The App contains no advertising software, no analytics software, and no crash-reporting software. It does not collect the Android advertising identifier, and it does not track you across other companies’ apps or websites.

Camera and photos, only with your permission

The App asks for access to your camera only when you choose to take a profile photo, and for access to a photo you select only when you choose one from your device. On Android 13 and later, photos are chosen through the Android photo picker, which gives the App only the image you pick. On Android 12 and earlier, the App uses the storage permission for the same purpose. You can decline or withdraw either permission in your device settings, and everything else in the App continues to work.

Payment information

You pay the Merchant, not Olympas, for anything you buy in the App. Payment methods are set by the Merchant and may include cash on delivery, bank transfer, and online payment gateways such as Stripe, Razorpay, or PayPal. Online payments are completed on the gateway’s own secure page, so your card number is entered into and held by the gateway, not by Olympas or the Merchant. We receive a record of the transaction: the amount, date, payment status and reference, and the payment method used.

Information from Merchants

A Merchant may enter information about you into Goúri, such as your contact details, customer group, store credit, or order history. For a Merchant’s employees, this may include HR, attendance, and payroll information the Merchant manages in Goúri. That information is handled as described under “Businesses that use Goúri” above.

Information we do not collect

The App does not collect your location, and it contains no location tracking of any kind. It does not use push notifications, and it does not access your contacts, call logs, SMS messages, microphone, calendar, health data, or the files on your device beyond a photo you choose. It has no biometric sign-in and no barcode scanning.

Product reviews are public. When you rate and review a product you bought, your rating, any tags you select, your comment, and the name on your account are published on that product’s page in the App and on the Merchant’s storefront, where anyone can read them. Please do not include anything in a review that you would not want to be public, such as your address, phone number, or order details.

Reviews are moderated by the Merchant, which can remove a review from the ERP. If you want your own review taken down, or you want to report a review as offensive, inaccurate, or a breach of someone’s privacy, contact the Merchant or write to us at contact@olympasapps.com and we will act on it. Support tickets and order notes are not public: they go only to the Merchant and to us.

We use personal information to:

• Create and manage your account, confirm your email address, and keep you signed in.
• Show the right catalogue, prices, stock, and deals for the store branch you have chosen.
• Process orders, payments, invoices, cancellations, and returns, and show you the status of each.
• Send transactional messages by email, such as registration and email-change codes, password resets, order confirmations, and invoices.
• Publish the reviews and ratings you choose to submit.
• Handle your support tickets and order help requests, and pass them to the Merchant.
• Maintain, secure, and troubleshoot the Services, including detecting and preventing fraud and abuse.
• Comply with legal obligations and enforce our agreements.
• Send marketing messages, but only where you have agreed to receive them. You can opt out at any time with the unsubscribe link in an email or by replying STOP to a text message.

We do not sell your personal information, and we do not share it for advertising. We share personal information only as follows:

• With the Merchant you are buying from. Your order, delivery address, order note, cancellation reason, review, and support ticket go to that Merchant so it can fulfill and support your purchase. The Merchant is the seller.
• With payment gateways, such as Stripe, Razorpay, or PayPal, when you pay online. You enter your card details on the gateway’s page, under the gateway’s own privacy policy.
• With service providers that help us operate the Services under contract, limited to what they need and barred from using it for anything else. These are cloud hosting and infrastructure, email delivery, SMS and WhatsApp delivery for Merchant notifications, customer support and lead management, and an avatar image service that receives the display name on your account to draw the initials shown on your profile.
• For legal reasons, when we believe in good faith that disclosure is required by law, court order, or government request, or is necessary to protect the rights, safety, or property of our users, Merchants, the public, or Olympas.
• In a business transfer, such as a merger, acquisition, or sale of assets, in which case the information remains subject to the protections in this policy.
• With your consent, or at your direction, including anything you choose to publish in a review.

You can delete your account from inside the App at any time, free of charge.

In the App

Open the App, go to Account, select Delete Account, read the summary of what will be removed, and confirm with your password. Deletion starts straight away and needs no approval from us.

Without the App

If you no longer have the App installed, visit olympasapps.com/delete-account, or email contact@olympasapps.com from the email address on your account with the subject line “Delete my account.” We will verify your request and confirm by email when deletion is complete.

What is deleted

Your profile, login credentials, saved addresses, profile photo, preferences, wishlist, comparison list, and cart are deleted within 30 days of a verified request. Copies held in encrypted backups are overwritten on our normal backup cycle within a further 90 days. Signing out alone removes the personal data held on your device, but keeps the account.

What may be kept, and why

Records of completed transactions, such as orders, invoices, receipts, and refunds, may be retained by the Merchant you purchased from for as long as tax, accounting, or other law requires it to keep them, typically up to seven years. Reviews you have published may remain visible without your name unless you ask for them to be removed. We may also keep limited information needed to prevent fraud, resolve disputes, or meet a legal obligation. Retained records are restricted to those purposes and deleted when no longer required.

Deleting some data without deleting your account

You can remove saved addresses, clear your wishlist and comparison list, replace or remove your profile photo, and change your marketing preferences in the App at any time. To delete anything else, such as a published review, contact us and we will help.

We keep personal information only as long as we need it for the purposes in this policy:

• Account information: while your account is active, then deleted within 30 days of deletion or closure.
• Order and transaction records: as long as the Merchant is legally required to keep them, typically up to seven years.
• Reviews and ratings: published until you or the Merchant remove them.
• Support tickets and order help requests: up to three years after the request is resolved.
• Server logs: up to 12 months, for security and troubleshooting.
• On-device data, such as the cart, wishlist, comparison list, and cached catalogue: held on your device, with cached catalogue data cleared after seven days and the rest cleared when you sign out or delete the App.
• Marketing preferences and opt-outs: as long as needed to honor your choice.
• Website inquiries and trial sign-ups that do not become a subscription: up to 24 months.
• Merchant business data: for the life of the subscription, plus 24 hours of continued account access and a further 30 days during which we will retrieve it on request, then deleted under our Data Processing Addendum.

We protect personal information with administrative, technical, and physical safeguards appropriate to its sensitivity, including:

• Encryption of all traffic between the App, the website, and our servers, using TLS. The App does not permit unencrypted connections.
• Encryption of stored data and backups at rest.
• Passwords stored only as salted hashes, never in readable form.
• Short-lived sign-in tokens that are replaced each time they renew, and screens such as checkout, orders, addresses, and profile that cannot be opened without signing in.
• Android protections in the App: device backup of app data is disabled, unnecessary permissions are blocked, and release builds have diagnostic logging turned off.
• Role-based access controls and least-privilege access for our personnel, and logical separation of each Merchant’s data.
• Monitoring, logging, secure software development practices, and data-protection training for personnel with access to personal information.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as the law requires.

The Services are intended for adults and are not directed to children. The App is not designed for or marketed to children under 13, and business accounts require users to be at least 18. We do not knowingly collect personal information from children under 13, or under 16 where local law sets a higher age.

If we learn that we have collected personal information from a child without verifiable parental consent, we will delete it promptly. If you believe a child has provided us personal information, contact us at contact@olympasapps.com.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you and receive a copy.
• Correct inaccurate or incomplete information.
• Delete your personal information.
• Port your information to another service in a structured, commonly used format.
• Object to or restrict certain processing.
• Withdraw consent where we rely on it, without affecting processing that happened before.
• Opt out of the sale or sharing of personal information and of targeted advertising. We do not sell or share personal information for these purposes.
• Not be discriminated against for exercising any of these rights.

California residents

Under the California Consumer Privacy Act, as amended, you have the rights to know, delete, and correct your personal information, to opt out of its sale or sharing, and to limit the use of sensitive personal information. In the past 12 months we have collected the categories described in “Information We Collect” (identifiers, commercial information, internet or electronic network activity information, visual information where you upload a profile photo, and the content you choose to publish), for the purposes in “How We Use Information,” and disclosed them only as described in “How We Share Information.” We do not sell or share personal information, and we do not use sensitive personal information to infer characteristics about you.

Residents of other U.S. states

Residents of states with comprehensive privacy laws, including Colorado, Connecticut, Texas, Virginia, and others, have similar rights. If we decline your request, you may appeal by replying to our decision. If the appeal is denied, you may contact your state attorney general.

Residents of the EEA, the United Kingdom, and Switzerland

We process your information on the following legal bases: to perform a contract with you, such as fulfilling an order; for our legitimate interests in operating, securing, and improving the Services; to comply with legal obligations; and with your consent where required, such as for marketing or camera and photo access. You may lodge a complaint with your local data protection authority. Where your information is transferred outside your region, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

How to exercise your rights

Use the settings in the App, or email contact@olympasapps.com. We will verify your identity before responding and will not charge a fee. We respond within one month under the GDPR and within 45 days under U.S. state laws, and will tell you if we need more time as the law permits. You may use an authorized agent where the law allows. If your request concerns information a Merchant controls, we will refer it to that Merchant and help it respond.

Olympas is based in the United States, and we process and store information in the United States. If you use the Services from outside the United States, your information is transferred to and processed in the United States under the safeguards described in this policy.

The Services may link to or work with third-party websites and services, such as payment gateways, a Merchant’s own website, or the social apps you use when you share a product link. Sharing a product sends only the link and whatever you choose to type. Their handling of your information is governed by their own privacy policies, and we encourage you to read them.

We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, notify you by email, in the App, or on our website before the change takes effect.

For questions about this policy or to exercise your privacy rights, contact Olympas LLC, Attn: Privacy, at contact@olympasapps.com, or by mail at 111 Calvin St, Savoy, IL 61874.