Privacy policy
Last updated 31 October 2026
This policy explains what personal information 3Commerce (“we”, “us”), based in Sydney, Australia, collects when you use the 3Commerce service, how we use and protect it, and the choices you have. 3Commerce is a business service: the company that invites you (your “organisation”) decides what data it puts into its workspace and is responsible for it; we process that data on its behalf.
What we collect
- Your account. Your name, e-mail address and, if you sign in with Google or your company’s single sign-on, the profile those services share with us (name, e-mail, picture). We do not receive your password for those services.
- Your organisation’s business data. Orders, customers’ names and shipping addresses, products, stock, suppliers, invoices and the like — put in by your organisation or brought in from the services it connects (for example its online store, marketplaces, 3PLs, carriers and bank feeds).
- Use of the service. What you do in the service (kept as an audit trail your organisation can read), and technical logs such as IP address, browser and times, used to run and secure the service.
Signing in with Google
When you choose to sign in with Google we receive only your name, e-mail address and profile picture, and use them only to identify you and sign you in to the workspace you were invited to. We do not use Google user data for advertising, do not sell it, and do not transfer it to others except as needed to provide the service. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How we use it
- To provide the service your organisation has asked for, and to support it.
- To keep the service and your data secure, and to find and fix faults.
- To send the e-mail the service sends (invitations, documents your organisation sends).
- For AI features your organisation turns on: the text needed for the task is sent to the AI model, which runs in Google Cloud (Vertex AI) and is not used to train models.
We do not sell personal information and do not use it for advertising.
Who processes it for us
Google Cloud (hosting, database, storage and Vertex AI), our e-mail delivery provider, and the services your organisation chooses to connect (which receive only what that connection needs). Each is bound to protect the data and use it only to provide its service.
Where it is kept, and for how long
Data is stored in Google Cloud in the United States. Business data is kept while your organisation uses the service and deleted on its instruction or within 90 days after its account ends; logs are kept for a limited period for security. Your organisation can set shorter retention for some records.
Security
Data is encrypted in transit and at rest; each organisation’s data is kept apart by row-level security in the database; credentials for connected services are held in a secret store; and every change is recorded in an audit trail.
Your choices and rights
You can ask to see, correct or delete your personal information. For data in your organisation’s workspace, ask your organisation’s administrator first; we will help them. You can also write to us directly. If you are in Australia you may complain to the Office of the Australian Information Commissioner; elsewhere, to your local data-protection authority.
Changes and contact
We will post changes here and update the date above. Questions: hello@3commerce.io.