Effective date: 2 October 2026
1. Who we are#
Scipio is a service of Ilscipio GmbH, Humboldtstr. 13, 65185 Wiesbaden, Germany (“we”, “us”). Contact us at [email protected] .
2. What this policy covers#
Scipio is a hosted online store and back office for sellers. Sellers use the Scipio iPhone app “Scipio: AI Sales Agent” and the website scipioerp.com.
- We are the controller of the data of our account holders (sellers and their staff) and of the visitors to scipioerp.com.
- Each seller is the controller of the data of the shoppers and customers of the seller’s store. We process that data for the seller, as the seller’s processor. The privacy notice of the seller’s store applies to shoppers. Shoppers can ask the seller, or us, and we will help the seller to answer.
3. The data we process#
| Data | Examples | Why |
|---|---|---|
| Account | Name, email address, the Apple user identifier from Sign in with Apple, passkey public keys, role in the store (owner, staff, content) | To give you an account and to sign you in |
| Store and business | Store name, business and tax data for the shop setup, legal pages, products, prices, stock | To run your store |
| Photos, videos and voice | Product photos and videos; your spoken commands | To create products and listings. The iPhone turns speech into text on the device |
| Orders and customers | Buyer name, shipping address, email address, ordered items, from your store and your connected channels | To show, fulfil and ship orders |
| Connected accounts | Access tokens for the channels that you connect (for example Google, eBay, Amazon, Etsy, Meta) | To act on these channels for you |
| Payments | Payment status and payouts. Card data goes directly to Stripe; we do not receive card numbers | To take payments in your store and to bill your plan |
| Device | Push notification tokens, Live Activity tokens | To send you notifications |
| Usage and security | Audit records of each action, logs, metrics | To keep the service safe and working, and to show you what Scipio did |
| Drafts before an account | Photos and a store draft, before you create an account | To let you try Scipio. We delete a draft after 7 days |
We process this data to perform our contract with you, to meet our legal duties, for our legitimate interest in a safe and working service, and with your consent where we ask for it (for example before the first AI job on our server).
4. AI features#
Scipio uses AI to write product texts, to build a store draft and to do work that you ask for.
- Many jobs run on your iPhone, for example speech to text and the sorting of photos. This data does not leave the device for these jobs.
- Some jobs run on our server with Claude, an AI model of Anthropic. Before the first server job, the app asks for your consent. Each answer shows where it ran: “On this iPhone” or “Scipio server”.
- By default, an action that costs money or changes material data needs your approval. Refunds and purchases always need your approval. Each action leaves an audit record.
5. Who receives data#
We share data only as far as necessary to give the service:
| Recipient | Role | Data |
|---|---|---|
| Hetzner | Hosting in the EU | All service data |
| Cloudflare | Network and security in front of our servers | Web traffic |
| Anthropic | AI processing for server jobs, after your consent | The content of the job, for example product photos and texts |
| Stripe | Payments in your store and billing of your plan | Payment and payout data, account data for the onboarding |
| Apple | Sign in with Apple, push notifications | Account identifier, device tokens |
| The channels that you connect: Google, Meta (Facebook, Instagram), eBay, Amazon, Etsy, Pinterest, AliExpress | Sales channels, on your instruction | Product data; order and shipping data for the orders of that channel |
| The shipping service that you connect | Shipping labels and tracking | Shipping address and parcel data |
| Authorities | Only when the law requires it | As the law requires |
6. Data from connected platforms#
- Google. With your permission, Scipio reads and writes the product data of your Merchant Center account to list your products on Google. Scipio’s use of information received from Google APIs follows the Google API Services User Data Policy , including the Limited Use requirements.
- Meta. With your permission, Scipio creates and updates the products in your catalog on Facebook and Instagram.
- Amazon. Scipio gets the buyer’s name and shipping address only to ship an order, and deletes them no later than 30 days after delivery.
- eBay. Scipio receives eBay’s account-deletion notifications and deletes the data of the eBay user.
- Etsy, Pinterest, AliExpress. With your permission, Scipio lists your products and, where the channel sends orders, reads the orders.
We use the data from a platform only to give you the Scipio service.
7. Where we store data#
We store the data in the European Union, at Hetzner. Some recipients in section 5 process data outside the EU. For these transfers we use the safeguards that the GDPR requires, for example the EU Standard Contractual Clauses.
8. How long we keep data#
- Account and store data: while your account exists. When you delete your account in the app, we delete the store data.
- Drafts without an account: 7 days.
- Amazon buyer data: no longer than 30 days after delivery.
- Backups: we make a backup every night. Deleted data stays in the backups until they expire after 30 days.
- Data that the law tells us to keep, for example invoices: for the legal period.
9. Security#
Each store has its own database. We encrypt the access tokens of connected channels. Our staff reach the servers only through a VPN, and staff actions leave audit records.
10. Your rights#
Depending on where you live, the GDPR, the UK GDPR, the California Consumer Privacy Act, the Australian Privacy Act or the Hong Kong Personal Data (Privacy) Ordinance gives you rights. These rights can include access, correction, deletion, export, objection, restriction, and the withdrawal of a consent.
- In the app you can export your store data and delete your account.
- For other requests, write to [email protected] .
- You can complain to your data protection authority.
11. Children#
Scipio is a service for businesses. You must be 18 years or older to use Scipio.
12. Changes#
We will publish each change of this policy on this page and tell account holders about a material change before it takes effect.
13. Contact#
Ilscipio GmbH, Humboldtstr. 13, 65185 Wiesbaden, Germany, [email protected]