Privacy.

What we collect

Account data. Your name, email address, hashed password, language preference and the stores you have access to. You give us this when an account is created for you.

Store data. The commerce records your organisation puts into Borkol: products, orders, stock, customers and related content. This belongs to your organisation. We process it to run the service and never sell it.

Device tokens. If you turn on push notifications in the mobile app, we store the push token that Apple or Google issues for that install, so we can deliver alerts about your own stores.

Diagnostics. When the app or dashboard crashes or errors, we receive a technical report through Sentry: device model, operating system version, app version, and the stack trace. We use it to fix defects.

Server logs. Requests to our API are logged with an IP address and timestamp for security and abuse prevention.

What we do not do

No advertising, no ad identifiers, no third-party trackers, no profiling, and no selling or sharing of personal data with data brokers. We do not track you across other companies’ apps or websites. The mobile app requests no access to your contacts, photos, microphone or location.

Who processes data for us

Hetzner (Germany) hosts the application and database. Sentry receives crash diagnostics. Apple and Google deliver push notifications to your device. Each acts as a processor under our instructions.

Where data is kept, and for how long

Application data is stored in the European Union. Account and store data is retained while your organisation has an account and deleted within 90 days of that account closing, unless we are legally required to keep it longer. Crash diagnostics are retained for 90 days. Push tokens are deleted when you sign out or disable notifications.

Your rights

Under the GDPR you can request access to your personal data, ask us to correct or erase it, object to processing, or ask for a portable copy. Email hello@borkol.com and we will respond within 30 days. If you are an employee of a merchant using Borkol, that merchant is the controller of the store data and we will route your request to them.

You can delete your account, and everything tied to it, from within the dashboard or by emailing us.

Changes

If this policy changes materially we will note it on this page and update the date above.