Privacy Policy for Sagify Canada

ezApps Software Inc.

Effective Date: December 06, 2025

ezApps Software Inc. ("ezApps," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use Sagify Canada (the "Service").

This Policy applies solely to the B2B use of Sagify Canada and should be read in conjunction with our Terms of Service.

1. Scope of This Policy

Sagify Canada is a business automation service for merchants that transfers invoice and order data between Shopify and Sage 50 Canada.

2. Information We Collect

We collect only minimal operational telemetry data required for:

• Billing
• Security
• Service reliability

Telemetry Data Collected:

• Unique user account ID
• Authentication token (securely stored in hashed form)
• Transaction counts (e.g., invoice and order volume)
• Timestamps of system actions

We Do Not Collect:

• Customer names
• Customer addresses
• Email addresses of customers
• Payment card numbers
• Shopping cart contents
• Product descriptions
• Tax IDs
• Order values
• Invoice documents

3. How We Use Information

We use telemetry data strictly to:

• Measure usage for billing
• Monitor system performance
• Detect security abuse
• Improve product stability

We never sell, trade, rent, or monetize telemetry data.

Configuration Data (Settings Backup)

Separately from the telemetry described above, Sagify can store a copy of your Sagify configuration so that you can restore it on another computer. This is a different category of information, used for different purposes, so we describe it separately.

A configuration backup contains the settings you have chosen, such as:

• Which Sage 50 general ledger accounts you map orders, taxes, shipping and fees to
• Your tax handling preferences and default tax codes
• The Sage 50 account codes you route different order types to
• Feature toggles and formatting preferences

A configuration backup does not contain any of the items in the "We Do Not Collect" list above, and it does not contain your Sage 50 or Shopify credentials, which never leave your computer.

We use configuration backups only to:

• Let you restore your setup on a new or additional computer
• Reproduce your configuration when you contact us for support
• Test changes to Sagify against real configurations before we release them, so that an update cannot silently change how your orders are posted

Your configuration is sent to us when you save your settings, and when you choose to upload from this computer after we show you that the settings on another computer differ. Nothing is uploaded before then. We keep a limited number of recent versions per store so that you can roll back, and older versions are discarded. You may ask us to delete your stored configurations at any time using the contact details below.

4. Data Storage & Retention

• Telemetry data is stored securely on protected servers.
• Telemetry records are retained no longer than necessary for:
  • Billing verification
  • Regulatory defense
  • Dispute resolution
• Configuration backups are retained as a limited number of recent versions per store; older versions are discarded automatically.
• Upon account termination, telemetry data, configuration backups, and processing records are deleted.

5. Data Security

We implement commercially reasonable security measures including:

• Token hashing
• Encrypted connections (HTTPS / TLS)
• Role-restricted internal access
• Infrastructure-level firewall protections

However, no system can be guaranteed 100% secure, and you acknowledge and accept this risk.

6. Third-Party Platforms

Sagify operates by connecting to:

• Shopify APIs
• Sage 50 SDK & APIs

Your customer, order, and invoice data remains entirely within:

• Shopify
• Sage
• Your own local systems

ezApps does not control, store, or access third-party systems beyond real-time transfer authorization.

7. Legal Basis for Processing (Canada & Quebec)

We process telemetry data under the following legal bases:

• Performance of a contract (providing the Service)
• Legitimate business interests (billing, system integrity)

Sagify is a commercial B2B system and is not intended for consumer personal use.

8. Your Rights

As a Sagify customer, you have the right to:

• Request access to your telemetry data
• Request correction of account-related records
• Request deletion of your account and telemetry data upon termination

Requests may be submitted to: support@ezapps.io

9. Children's Privacy

Sagify is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

10. International Data Transfers

Your telemetry data may be processed in Canada or other jurisdictions where our infrastructure providers operate. All data is protected using commercially reasonable safeguards.

11. Data Breach Procedures

In the event of a confirmed security breach affecting telemetry data:

• We will investigate immediately
• We will notify affected customers without unreasonable delay
• We will take immediate steps to mitigate further exposure

Because Sagify does not store customer, invoice, or order data, breach exposure is strictly limited to telemetry records.

12. Policy Updates

We may update this Privacy Policy from time to time.

• Material changes will be communicated via email or on our website
• Continued use of the Service after the effective date constitutes acceptance

13. Contact Information

For all privacy-related questions or requests:

ezApps Software Inc.
support@ezapps.io