B2BStore

Privacy Policy

Last updated: November 4, 2026

B2BStore (“B2BStore”, “we”, “us”) is a platform that lets businesses (“Merchants”) create and run B2B online stores, manage quotations, leads, orders and customer conversations, and connect their Facebook Pages, Instagram accounts and Meta ad accounts. This policy explains what personal data we collect, why, who we share it with, and the choices you have. It applies to b2bstore.net, app.b2bstore.net, every store hosted on b2bstore.netor on a Merchant’s own domain, and our Facebook/Meta app.

1. Who is responsible for your data

  • Merchants and their staff: B2BStore is responsible for the account data you give us to use the platform.
  • Visitors and customers of a Merchant’s store: the Merchant who runs that store decides what data it collects and how it is used. B2BStoreprocesses that data on the Merchant’s behalf, only to provide the service. For requests about a particular store, contact that store first; we will help where we can.

2. Data we collect

Data you give us

  • Account details: name, email address, phone number, business name, store name and password (stored only as a secure hash).
  • Store content: products, prices, images, pages, settings and anything else a Merchant adds to their store.
  • Customer and lead data entered into a store: names, emails, phone numbers, company and address details, quotation requests, orders, messages and chat history.
  • Billing details for paid plans. Card payments are handled by our payment providers; we do not store full card numbers.
  • Anything you send us when you contact support.

Data collected automatically

  • Log and device data: IP address, browser type, pages visited, referring page and timestamps.
  • Cookies needed to keep you signed in, remember your cart and keep the service secure.

Data from Facebook and Instagram (Meta)

When a Merchant chooses to connect a Facebook Page, Instagram professional account or Meta ad account through Facebook Login, and only with the permissions the Merchant approves, we may receive:

  • Basic profile information of the person who connects (name, Facebook user ID and email address).
  • The list of Pages, Instagram accounts and ad accounts the Merchant manages, with their names, IDs and access tokens.
  • Messages sent to the Merchant’s Page through Messenger or to their Instagram account through Direct, including the sender’s name, profile picture and ID, so the Merchant can read and reply from B2BStore.
  • Comments on the Merchant’s posts, so the Merchant can read, reply to, hide or remove them.
  • Posts, media and insights (reach, engagement and similar statistics) for the Merchant’s own Page and Instagram account.
  • Ad account, campaign, ad set, ad and performance data, so the Merchant can view reports and create or manage ads.

We only access Meta data for accounts a Merchant has connected, and only while that connection stays active.

3. How we use data

  • To provide the platform: host stores, process quotations and orders, show leads and conversations, and run the store admin.
  • To provide Meta features the Merchant turns on: a shared inbox for Messenger and Instagram messages and comments, publishing and scheduling posts, showing Page and Instagram insights, and reporting on and managing Meta ads.
  • To create and secure accounts, prevent fraud and abuse, and fix problems.
  • To bill for paid plans and send service emails such as receipts, security alerts and important changes.
  • To improve the platform using aggregated, non-identifying usage information.
  • To meet legal obligations.

We do not sell personal data. We do not use data received from Meta for advertising profiles, to build user databases, to sell or license to data brokers, or for any purpose other than providing the features the Merchant asked for. Our use of Meta data follows the Meta Platform Terms and Developer Policies.

4. Who we share data with

  • The Merchant whose store or connected account the data belongs to.
  • Service providers that run the platform for us under contract, such as cloud hosting and databases (Amazon Web Services), file storage and delivery, email delivery, and payment processing (for example Stripe or Paystack, when a Merchant enables them).
  • Meta, when a Merchant uses a Meta feature, for example sending a reply, publishing a post or creating an ad.
  • Authorities, when the law requires it, or to protect the rights, safety and property of our users or the public.
  • A successor in a merger, acquisition or sale of assets, which must keep honouring this policy.

5. How long we keep data

We keep data for as long as the account or store is active, or as needed to provide the service. When a store or account is deleted, or a Meta account is disconnected, we delete the related data within 30 days, except for what we must keep for legal, tax or security reasons. Backups are overwritten on a rolling basis within a further 30 days.

6. Security

Data is encrypted in transit (HTTPS) and stored on access-controlled servers. Passwords are stored as one-way hashes, each store’s data is kept in its own separate database schema, and access tokens from Meta are only used on our servers. No system is perfectly secure, but we work to protect your data and will notify affected users of a breach as the law requires.

7. Your rights and choices

Depending on where you live, you may have the right to:

  • access the personal data we hold about you and get a copy of it;
  • correct data that is wrong or incomplete;
  • delete your data;
  • object to or restrict certain processing, or withdraw consent;
  • complain to your local data protection authority.

Merchants can edit most data directly in their store admin. To make any of these requests, email support@b2bstore.net. You can disconnect B2BStore from Facebook at any time in your Facebook settings under Settings & privacy → Settings → Business integrations. See our Data Deletion page for how to delete your data.

8. International transfers

We and our providers may process data in countries other than yours. Where required, we use appropriate safeguards such as standard contractual clauses.

9. Children

B2BStore is a business service and is not meant for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.

10. Changes to this policy

We may update this policy. We will change the date at the top and, for significant changes, tell Merchants by email or in the dashboard before the change takes effect.

11. Contact

For privacy questions or requests, email support@b2bstore.net.

Questions? Email support@b2bstore.net.