Privacy Policy
Last updated 2026-08-05
Who we are
The data controller for anyshop.io is Anyshop LLC, a Wyoming, United States limited liability company with its registered office at 1603 Capitol Avenue, Suite 413, #4213, Cheyenne, WY 82001, US. Write to support@anyshop.io for anything in this policy.
What we collect
Account data: your name, email address, and password, stored as a hash. Organization and store data: what you name them and how you configure them. Business profile data: the legal identity a merchant shows buyers. Commerce data: products, orders, and entitlements.
When you connect a payment processor we store the identifier of your Stripe account, never your Stripe API keys. Technical data: server logs, including IP address and user agent, kept for security and debugging.
Buyer data
When a buyer purchases from a store on anyshop, the merchant is the seller and decides what is sold and on what terms. We process order, payment-status, and entitlement data to run checkout, deliver webhooks, and issue receipts for that merchant. Card details go directly to the payment processor; they never touch anyshop’s servers.
How we use data
To provide and operate the service, keep it secure, support you, and meet legal obligations. We do not sell personal data and we do not use it for advertising.
Cookies
Only essential cookies: a session cookie that keeps you signed in. No advertising or cross-site tracking cookies.
Where your data lives
Our primary database and application compute run in Frankfurt, Germany. Some of our providers process data in the United States.
Service providers
Vercel (application hosting), Neon (database hosting), Stripe (payment processing, on the merchant’s own account), and Resend (transactional email). Each processes data only to provide its service to us.
International transfers
Anyshop LLC is a United States company. Where personal data leaves the European Economic Area, we rely on the transfer safeguards our providers offer, such as standard contractual clauses.
EU representative
Anyshop LLC has not yet appointed a representative in the European Union under Article 27 of the GDPR. This policy will be updated to name the representative as soon as one is appointed.
Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict its processing. Write to support@anyshop.io and we will respond within 30 days. You also have the right to complain to a data-protection authority.
Retention
We keep personal data while your account is active and as long as the law requires afterwards. On request we delete personal data we are not legally required to keep.
Security
Tenant data is isolated at the database layer with row-level security, transport is encrypted, and internal access follows least privilege.
Children
anyshop is a business tool and is not directed at children under 16.
Changes
We may update this policy as the service evolves. Material changes are announced by email or in the dashboard before they take effect.