Privacy Policy

Effective Date: April 3, 2026
Last Updated: April 3, 2026

This Privacy Policy explains how JVZoo Extractor ("we," "us," or "our") collects, uses, stores, discloses, and protects information in connection with your use of our platform at https://jvzooextractor.com (the "Service"). We are committed to handling your data responsibly and in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR) where applicable and the California Consumer Privacy Act (CCPA) where applicable.

By using the Service, you consent to the practices described in this Privacy Policy.

1. Who We Are and What We Do

JVZoo Extractor is a B2B SaaS application that retrieves and displays transaction data from your connected JVZoo marketplace accounts. We are a data processor with respect to your JVZoo transaction records and a data controller with respect to your account and usage information.

Data Controller Contact: legal@jvzooextractor.com

2. Information We Collect

2.1 Information You Provide Directly

• Account Registration Data: Your name, email address, and password (stored hashed using bcrypt).
• JVZoo API Keys: Your JVZoo API credentials, stored in encrypted form. We do not store these in plaintext.
• Billing Information: Subscription and payment details processed by Stripe. We store only a Stripe customer ID and subscription status — we never see or store your full payment card numbers.
• Support Communications: Content of emails or messages sent to us.
• White-Label Branding: Your company name and logo, if you upload these for report customization.
• Payout Information: If you participate in our affiliate program and request a payout, we collect your payment details (e.g., PayPal email address).

2.2 JVZoo Transaction Data Synchronized on Your Behalf

When you connect a JVZoo account, our Service retrieves and stores the following categories of data from JVZoo's API on your behalf and under your instruction:

• Seller transaction records: transaction IDs, buyer names and email addresses, product names, sale amounts, currencies, transaction dates, transaction statuses (completed, refunded, reversed, chargebacked), and buyer country/IP geolocation data;
• Affiliate commission records: affiliate transaction IDs, commission amounts, product names, and transaction dates;
• JVZoo account identifiers (API key references, account names).

Important: This transaction data relates to your customers and affiliates — third parties who transacted on JVZoo. You, as the JVZoo account holder, are responsible for ensuring your use of this data through our Service complies with applicable privacy laws. You are the data controller of your buyers' and affiliates' information.

2.3 Automatically Collected Usage Data

• Log data: IP address, browser type, operating system, pages visited, timestamps;
• Session information: authentication session identifiers;
• Sync logs: records of data synchronization operations performed;
• Error and performance logs for system reliability purposes.

3. How We Use Your Information

4. Data Sharing and Disclosure

We do not sell your personal data. We share your information only in the following circumstances:

• Stripe, Inc.: For payment processing. Stripe is PCI-DSS compliant. See Stripe's Privacy Policy.
• Email delivery providers: For sending transactional notifications. These providers access your email address only as necessary to deliver messages.
• Team Members you authorize: If you invite Team Members to your account, they will have visibility into your synchronized JVZoo transaction data as defined by the role you assign.
• Legal process: We may disclose information where required by law, court order, or governmental authority, or where we reasonably believe disclosure is necessary to protect rights, property, or safety.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, which will remain bound by this Privacy Policy.

5. Data Retention

• Account data: Retained for the duration of your account and for 30 days following deletion, to allow for export requests.
• JVZoo transaction data: Retained for the duration of your subscription, subject to plan limits. Upon account deletion, transaction data is purged within 30 days.
• Billing records: Retained for 7 years as required for tax and accounting compliance.
• Log data: Retained for up to 90 days for security and debugging purposes.

6. Data Security

We implement industry-standard technical and organizational security measures including:

• TLS/HTTPS encryption for all data in transit;
• AES-256 encryption for JVZoo API keys at rest;
• bcrypt hashing for all passwords;
• Role-based access controls limiting employee access to user data;
• Regular security audits and vulnerability assessments.

No security measure is infallible. In the event of a data breach that is likely to result in high risk to your rights, we will notify affected users within 72 hours of becoming aware, as required by applicable law.

7. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure ("Right to be Forgotten"): Request deletion of your account and associated data, subject to our legal retention obligations.
• Portability: Request your transaction data in a machine-readable format (CSV export).
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Objection: Object to processing based on legitimate interests.
• Withdraw Consent: Where processing is based on consent, withdraw that consent at any time without affecting prior lawful processing.

To exercise these rights, contact us at legal@jvzooextractor.com. We will respond within 30 days. If you are an EU resident and believe we have not complied with your data protection rights, you have the right to lodge a complaint with your local supervisory authority.

8. California Privacy Rights (CCPA)

California residents have the right to: know what personal information is collected and how it is used; request deletion of personal information; opt out of the sale of personal information (we do not sell personal information); and not be discriminated against for exercising these rights. To exercise your CCPA rights, email legal@jvzooextractor.com with subject line "CCPA Request."

9. International Data Transfers

If you access the Service from outside the country in which our servers are located, your data may be transferred internationally. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses under GDPR) for such transfers.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately at legal@jvzooextractor.com.

11. Third-Party Links

The Service may contain links to third-party websites, including JVZoo's marketplace. This Privacy Policy does not apply to those sites, and we encourage you to review their respective privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email and/or via a notice within the Service at least 14 days before taking effect. The "Last Updated" date at the top of this page reflects the most recent revision.

13. Contact Us

For any privacy-related questions, concerns, or requests, please contact:
JVZoo Extractor
Email: legal@jvzooextractor.com
Website: https://jvzooextractor.com