Privacy Policy
Your privacy matters to us. This policy explains how we collect, use, and protect your information.
Effective Date: August 9, 2026 | Last Updated: August 9, 2026
CFO International LLC ("Bazaroo", "we", "us", or "our") operates the Bazaroo inventory management platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
1. Information We Collect
Account Information
- Name and email address
- Company name and business information
- Phone number (optional)
- Billing address
- Password (stored securely using industry-standard hashing)
Payment Information
We use Stripe as our payment processor. Stripe collects and processes your payment card information. We receive limited information from Stripe, including the last four digits of your card, card type, and billing address. We do not store complete credit card numbers on our servers.
Usage Data
- Log data (IP address, browser type, operating system, referring URLs)
- Device information (device type, unique device identifiers)
- Feature usage and interaction data
- Performance metrics and error logs
Business & Integration Data
Through your use of the Service, you may provide inventory data, order and transaction data, customer information from connected integrations, warehouse data, and financial data. When you connect third-party services (Shopify, QuickBooks, Amazon, etc.), we collect authentication tokens and data synced as authorized by you.
2. How We Use Information
Provide the Service
Operate core functionality, process transactions, sync inventory data
Improve & Personalize
Analyze usage patterns, develop features, personalize experience
Communicate
Send notifications, respond to support requests, marketing (with consent)
Security & Compliance
Protect against fraud, monitor threats, comply with legal obligations
3. Data Sharing
We do not sell your personal information.
With Your Consent
When you connect integrations (Shopify, QuickBooks, Amazon, eBay, etc.), you authorize us to share necessary data with those services.
Service Providers
We share data with trusted providers who assist in operating our Service:
- Stripe — Payment processing
- Amazon Web Services — Cloud infrastructure
- Analytics providers — Service improvement
- Email service providers — Communications
Legal Requirements & Business Transfers
We may disclose information when required by law or in response to valid legal processes. In the event of a merger or acquisition, your information may be transferred as part of that transaction.
4. Data Security
Encryption in transit and at rest
Application traffic uses HTTPS/TLS. Database storage and backups use AES-256 encryption (Aurora storage encryption with AWS KMS).
Access controls
Application permissions limit access by tenant and role.
Audit records
Selected security-relevant application actions are recorded for review.
Credential protection
Passwords and authentication secrets are not published in page content.
5. Data Retention
- •Active Accounts: Operational data is retained while the account is active and as needed to provide the service.
- •After Account Closure: Data enters the account-lifecycle deletion process, subject to backup cycles and required legal retention.
- •Legal Requirements: Some data may be retained longer for compliance (e.g., billing records for tax purposes).
6. Your Rights
For All Users
Location-based privacy rights
Depending on where you live, applicable law may provide additional rights or complaint options. We review requests under the law that applies to the requester and the data involved.
Exercising Your Rights
Contact us at [email protected]. We will respond to valid requests within the period required by applicable law.
8. Third-Party Services
Cloud Infrastructure
Bazaroo is hosted on Amazon Web Services (AWS). AWS publishes its own infrastructure attestations; Bazaroo does not claim those certifications as its own.
User-Authorized Integrations
When you connect integrations, you authorize data sharing with these services:
9. Children's Privacy
The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will delete it promptly. Contact us at [email protected] if you believe we have collected information from a child.
10. International Data Transfers
Bazaroo is based in the United States. Your data may be transferred to and processed in the United States or other countries where our service providers operate.
Safeguards
- Cloud infrastructure hosted on AWS with provider-managed controls for storage, networking, and access (AWS publishes its own infrastructure attestations; Bazaroo does not claim those certifications as its own)
- Application traffic protected with HTTPS/TLS; database storage and backups encrypted at rest with AES-256 (Aurora storage encryption with AWS KMS)
- Application access limited by tenant and role for workspace data
- Vendors that process personal data on our behalf are subject to contractual terms and operational requirements appropriate to their role
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the "Last Updated" date and notify you of material changes by email or through the Service. Continued use after changes constitutes acceptance of the updated policy.
12. Contact Information
General support
[email protected]Privacy requests
[email protected]Quick Actions
Manage cookies
Use Cookie settings in the site footer
Privacy request
Email [email protected]
Account help
Email [email protected]
Questions About Your Privacy?
We're here to help. Reach out to our privacy team.