Privacy Policy

Who we are

Btab is operated by BTAB Ecommerce Services Pty Ltd (ABN 82 631 309 263), an Australian company. We run the Btab marketplace platform: the website at btab.app, the online stores that store owners create with Btab, the vendor, supplier and admin dashboards, and the APIs and AI-agent connections that work with them.

We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This policy explains what we collect, why, who we share it with, and how you can access or correct it.

If you are shopping on a store that runs on Btab, both this policy and the store's own policies apply. The store operator decides what it sells and how it presents its store; Btab processes the order, the payment and the delivery data on the platform.

Who this covers

• Shoppers — anyone who browses or buys from a store hosted on Btab.
• Store owners (vendors) — businesses and people who create a store on Btab and sell through it.
• Suppliers — businesses that list products for sale through Btab stores.
• Visitors — anyone who uses btab.app, our help centre or our blog.
• Connected apps — AI assistants and other software a store owner authorises to work with their store.

What we collect

Shoppers

• Your name, email address, phone number and delivery address when you order, enquire, or ask for a quote.
• What you ordered, what you paid, and delivery and return details.
• Payment details are collected by our payment processor, Stripe, on its own secure forms. Btab never sees or stores your full card number.
• Technical details when you visit a store: IP address, browser, device, pages viewed, and cookies needed to keep your cart and checkout working.
• If a store owner has turned on an advertising pixel for their store, the store's own privacy page tells you which one and how to opt out.

Store owners and suppliers

• Account details: name, email, password (stored only as a one-way hash), business name, ABN or other business identifier, address and payment details for payouts.
• We check business identifiers against the Australian Business Register to confirm the business exists and its GST status.
• Sign-up context: IP address, browser, time zone and approximate location, used to prevent fraud and abuse.
• Everything you put into your store or catalogue: products, prices, images, pages, blog posts, settings, orders and messages.
• Your use of the dashboards, so we can improve them and help you when something goes wrong.

Everyone

• Support conversations and anything you send us by email.
• Analytics about how btab.app and the dashboards are used (see Cookies and analytics).

Why we collect it

• To run the marketplace: take orders, process payments, arrange delivery, handle returns and refunds, pay store owners and suppliers, and issue tax invoices.
• To create and operate your account and store.
• To verify businesses, prevent fraud, and keep the platform and its users safe.
• To send transactional messages you would expect: order confirmations, shipping updates, quotes, account and security notices.
• To provide support and answer enquiries.
• To improve the platform, including understanding which features are used and where people get stuck.
• To meet our legal obligations, including tax and record-keeping.
• With your consent, to send marketing about Btab. You can opt out at any time using the link in the message or by emailing us.

We do not sell personal information.

AI features

Btab uses AI models to help store owners write product descriptions, design pages, answer questions in the dashboard assistant, and let authorised AI apps work on a store. When these features run, the relevant content (for example a product's title, description and images, or a question typed into the assistant) is sent to an AI model provider to generate the result. We do not send payment details to AI providers. AI model providers may be located outside Australia.

A store owner can connect an AI app (such as Claude, ChatGPT or Cursor) to their store. The owner chooses whether the app may only read the store or also change it, every change an app makes is recorded, and the owner can disconnect the app at any time from their dashboard.

Who we share it with

We share personal information only where needed to run the platform:

• Store owners receive the order and delivery details for orders placed on their store, so they can fulfil them and help you.
• Suppliers receive the delivery details for the lines they are fulfilling. They do not receive your email address.
• Stripe processes payments and payouts and holds card and bank details under its own privacy policy.
• Delivery carriers receive the details needed to deliver your order.
• Service providers that host and run the platform for us: cloud hosting, email delivery (for transactional email), domain and network services, and AI model providers.
• Regulators, courts and law enforcement where the law requires it.

Overseas disclosure

Our servers are hosted in data centres in the European Union operated by our hosting provider, and our backups are held there too. Some service providers, including our payment processor and AI model providers, operate globally. By using Btab you understand that your information may be stored or processed outside Australia. We choose providers that protect information to a standard consistent with the APPs, and we remain responsible for it.

Cookies and analytics

• Necessary cookies keep you signed in and keep your cart and checkout working. Stores and dashboards do not work without them.
• Analytics on btab.app and in the vendor dashboard help us see which pages and features are used, using PostHog (hosted on our own servers) and Umami. This may include recordings of how the page is used on btab.app's store-building flow. We use this to improve the product, not to build advertising profiles.
• Stores' advertising pixels are set by the store owner, not by Btab, and are disclosed on that store's privacy page.

You can block cookies in your browser; some parts of the platform will stop working if you do.

How long we keep it

We keep account information while your account is open, and order, invoice and payment records for at least seven years after the transaction as Australian tax law requires. Analytics and visit logs are kept for a limited period and then deleted or aggregated. When you close your account we delete or de-identify information we no longer need, unless we must keep it by law.

How we protect it

Passwords are stored as one-way hashes. API keys and connection tokens are stored as hashes and can be revoked instantly. Data is encrypted in transit. Access to production systems is restricted and logged. Card details never touch our servers. No system is perfectly secure; if we become aware of a data breach likely to cause serious harm, we will notify affected people and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme requires.

Your rights

You can ask us for a copy of the personal information we hold about you, and ask us to correct it. Store owners and suppliers can see and change most of their details in their dashboard. Email [email protected] for anything else. We respond within 30 days.

If you are not happy with how we handle your information or a request, tell us first so we can fix it. If you are still not satisfied you can complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Children

Btab is for people aged 18 or over. Store owners and suppliers must be adults running a business. We do not knowingly collect personal information from children.

Changes to this policy

When we change this policy we update the date at the top. Significant changes are announced in the dashboards or by email.

Contact

BTAB Ecommerce Services Pty Ltd (ABN 82 631 309 263), Australia — [email protected].