Privacy Policy

Last updated: March 18, 2026

1. Introduction

UltraGrace ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

2. Information We Collect

We collect the following types of information:

  • Account Information: Name, email address, username, and password when you register.
  • Business Data: Shopify store information (orders, products, customers), ad platform data (Meta, Google, TikTok), and financial data from QuickBooks (expenses, revenue).
  • Usage Data: How you interact with our platform, including dashboard views, feature usage, and analytics.
  • Payment Information: Processed securely through Flutterwave. We do not store credit card details.
  • Communications: Emails and messages you send to us.

3. How We Use Your Information

We use your information to:

  • Provide and maintain our business intelligence services
  • Generate AI-powered insights and recommendations
  • Process your subscription payments
  • Communicate with you about your account and updates
  • Improve and optimize our platform
  • Detect, prevent, and address technical issues or fraud
  • Comply with legal obligations

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your personal data under the following legal bases:

  • Contract Performance: To provide our services to you under our Terms of Service.
  • Legitimate Interests: To improve our services, prevent fraud, and ensure security.
  • Consent: Where you have given explicit consent (e.g., marketing emails).
  • Legal Compliance: To comply with applicable laws and regulations.

5. Data Sharing and Disclosure

We do not sell your personal data. We only share data with:

  • Third-Party Services You Connect: Shopify, Meta, Google, TikTok, QuickBooks (only with your authorization).
  • Service Providers: Companies that help us operate our platform (hosting, payments, analytics) who are bound by data protection agreements.
  • Legal Authorities: When required by law or to protect our rights.

6. Data Security

We implement industry-standard security measures including AES-256 encryption for sensitive data, secure OAuth2 authentication, regular security audits, and access controls. However, no method of transmission over the Internet is 100% secure.

7. Data Retention

We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we need to retain it for legal obligations.

8. Your Rights (GDPR & CCPA)

You have the right to:

  • Access: Request a copy of your personal data.
  • Rectification: Correct inaccurate data.
  • Deletion: Request deletion of your data ("Right to be Forgotten").
  • Restriction: Restrict processing of your data.
  • Data Portability: Receive your data in a structured, commonly used format.
  • Objection: Object to processing based on legitimate interests.
  • Opt-Out: Opt out of marketing communications.

To exercise these rights, contact us at privacy@ultragracehq.com.

9. International Data Transfers

Your data may be transferred to and processed in countries outside your residence, including Nigeria and the United States. We ensure appropriate safeguards are in place through Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal data from minors. If you become aware that a child has provided us with data, please contact us.

11. Cookies and Tracking

We use essential cookies to maintain your session and preferences. We do not use tracking cookies for marketing purposes without your consent. You can control cookies through your browser settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes via email or a notice on our platform. Your continued use constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy, contact us at:
📧 privacy@ultragracehq.com
📍 UltraGrace, Oyo, Nigeria