Privacy Policy

Effective Date: May 11, 2026
Last Updated: May 11, 2026

This Privacy Policy explains how Galaxy Group ("we," "us," or "our") collects, uses, discloses, and protects your information when you use Star Mesh, our multi-channel e-commerce syndication platform, website, API, and associated crawler services (collectively, the "Service").

By registering for an account, connecting your marketplace channels, or otherwise using the Service, you consent to the data practices described in this policy.

1. Information We Collect

To provide our syndication and synchronization services, we collect several categories of information:

A. Account & User Information

When you register, we collect personal and business information necessary to create and manage your account, including:

• Name and email address.
• Encrypted account passwords.
• Business name, timezone, and primary currency.

B. Connected Channel Data (Marketplace Credentials)

To push your products and sync inventory with third-party platforms (such as Shopify, Amazon, Rakuten, Yahoo, and BUYMA), you must grant us access to your marketplace accounts. We collect and strictly encrypt:

• OAuth tokens, API keys, Client IDs, and Client Secrets.
• Store URLs and merchant identification numbers.

C. Product, Inventory, & Customer Order Data

When you use our Service through CSV upload, API import, webhook synchronization, or our Crawler Service, we process the data you provide to distribute it to your connected channels. This includes:

• Product catalogs (titles, descriptions, SKUs, pricing, images, and custom attributes).
• Inventory levels, warehouse allocations, and stock movements.
• Customer Order Data: Webhooks from marketplaces bring in order records necessary for stock deductions, order reconciliation, and fulfillment synchronization. This includes customer order details, shipping data, and line items associated with connected marketplaces.

D. Billing & Credit Ledger Data

To manage your Monthly and Top-up credits, we collect:

Note: We do not store raw credit card numbers. Payment processing is handled securely by our third-party payment gateways, including Stripe and PayPal.

• Transaction history (ledgers) of credit purchases, usage, and reservations.
• Billing addresses and tax identification numbers (if applicable).

E. Crawler Service Data

If you request our managed Crawler Service, we collect the target URLs, specific extraction requirements, and the resulting structured data scraped from those third-party sites on your behalf.

2. How We Use Your Information

We use the collected information strictly to operate, secure, and improve the Service. Specifically, we use your data to:

• Provide the Service: Ingest your product data, transform it, and distribute it to your selected e-commerce channels.
• Maintain Synchronization: Listen to webhooks, process external orders, push fulfillment tracking, and automatically update inventory levels across your connected storefronts to prevent overselling.
• Manage Billing: Deduct credits based on system usage, allocate monthly credits, and process top-up payments for premium credits.
• Customer Support: Investigate failed distribution tasks, API errors, import batch issues, or integration bugs.
• Security & Fraud Prevention: Monitor for unauthorized access, abuse of our API rate limits, or violations of our Terms of Service.

3. Additional Data Processing Practices

Data Collected

Star Mesh processes only the information necessary to provide inventory synchronization, catalog management, order management, and marketplace integration services.

Types of Data

The types of data processed may include:

• Merchant account information.
• Product catalog data.
• Inventory data.
• Order information.
• Customer shipping information.
• Marketplace identifiers.

Purposes of Processing

We process personal information solely for providing and improving the Star Mesh platform, synchronizing marketplace data, fulfilling operational workflows, customer support, security monitoring, and legal compliance.

Data Minimization

Star Mesh limits data collection and processing to the minimum amount necessary to provide requested services.

Consent Management

Star Mesh respects customer consent preferences communicated through connected platforms and processes personal data only as authorized by merchants and applicable laws.

Opt-Out Rights

Star Mesh does not sell customer personal information. Where applicable, we honor merchant instructions and platform signals regarding opt-out preferences.

Automated Decision Making

Star Mesh does not use personal data for automated decision-making that produces legal or similarly significant effects on individuals.

Data Retention

Personal information is retained only for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce agreements. When no longer required, data is securely deleted.

4. How We Share Your Information

We do not sell your personal or business data to data brokers. We only share information under the following circumstances:

• With Your Explicit Instruction (Marketplaces): The core function of our Service is to transmit your product, inventory, and fulfillment data to third-party marketplaces. By enabling a channel connection, you direct us to share this data with them.
• Service Providers: We share necessary data with trusted third-party vendors who assist in operating our platform, such as cloud hosting providers, database managers, and payment processors. These providers are bound by strict confidentiality agreements.
• Legal Compliance & Protection: We may disclose your information if required to do so by law, subpoena, or court order, or to protect the rights, property, or safety of Galaxy Group, our users, or the public.
• Business Transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that business transaction.

5. Data Security & Retention

Security

We implement industry-standard security measures to protect your data. All sensitive marketplace credentials are encrypted at rest using AES-256-GCM encryption. API requests and web traffic are secured via TLS/SSL. While we strive to use commercially acceptable means to protect your data, no method of transmission over the internet or electronic storage is 100% secure.

Retention & Soft Deletion

We retain your data only for as long as your account is active or as needed to provide you the Service.

• Product Data: When you delete a product, we utilize a soft delete method to ensure we can successfully transmit a delete command to your connected marketplaces before permanently removing the record from our active databases.
• Financial Ledgers: We retain credit ledger entries and billing history as required by tax and accounting laws.

6. Third-Party Links and Policies

Our Service interacts heavily with third-party e-commerce platforms. This Privacy Policy does not apply to the practices of those third parties. We strongly encourage you to review the privacy policies of any marketplace you connect to Star Mesh, as they will govern how those platforms handle the product and customer data we transmit to them on your behalf.

7. Your Rights Regarding Your Data

Depending on your location, you may have certain legal rights regarding your personal information, including:

To exercise these rights, please contact us at the email provided below.

• The right to access the personal data we hold about you.
• The right to request correction of inaccurate data.
• The right to request deletion of your account and associated data.
• The right to opt out of marketing communications.

8. International Data Transfers

Our servers are located in Kanagawa, Japan. If you are accessing the Service from outside this region, please be aware that your information will be transferred to, stored, and processed in our facilities and by those third parties with whom we share it as described in this policy.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by posting the new policy on our website and updating the Effective Date at the top.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please reach out through our contact page:

Contact Us