Wholesale GridPrivacy policy
RevSprint Studio (“we”, “us”) makes the B2B Wholesale Quick-Order Grid app (the “App”) for Shopify merchants. This policy explains what the App collects when a merchant installs it, why, where it is stored, and how it is deleted. For the personal data of a merchant's customers, the merchant is the controller and we process it on the merchant's behalf.
1. What the App collects
From the merchant's store (through Shopify's Admin API, within the permissions granted at install)
- Store details: shop domain, store name, contact and owner email, currency, and which customer account system the store uses. Used to run the App and address emails.
- Products and variants: IDs, titles, SKUs, prices and stock, read when the merchant sets custom prices or order rules. Product titles and variant names are saved with custom price lists.
- Customers: customer IDs and tags, read to count wholesale buyers and to tag a buyer when an application is approved. The App does not store customer lists.
- Settings: the merchant's wholesale groups, rules, prices, form questions and preferences.
- Access tokens: the credentials Shopify issues so the App can act for the store.
From people who apply for wholesale on a merchant's store
- What they enter in the application form: name, email, phone, company, and answers to the merchant's questions; plus the customer ID if they were signed in. Stored so the merchant can review the application. When approved, these details are also written to the customer's record in the merchant's Shopify admin.
The App does not collect payment card details, passwords, or browsing behaviour, and the storefront blocks set no tracking cookies.
2. How we use it
- To show wholesale prices and rules on the storefront and apply them at Shopify checkout.
- To show applications to the merchant, approve buyers and send the related emails (application received, approval with sign-in steps, new-application alerts to the merchant).
- To answer support requests and tell merchants about important changes to the App.
We do not sell or rent data, use it for advertising, or share it except with the service providers below.
3. Service providers
- Render (Render Services, Inc., United States): runs the App's servers.
- Neon (serverless Postgres, hosted on Amazon Web Services in the United States): stores the App's database, encrypted in transit and at rest.
- Cloudflare: domain name service for our websites, and hosting of this website.
- Brevo (Sendinblue SAS, EU): sends the App's transactional emails.
- Shopify: the platform the App runs on; data the App writes to a store (customer tags, metafields, discounts) lives in Shopify.
4. Retention and deletion
- Data is kept while the App is installed.
- When a merchant uninstalls, Shopify sends a
shop/redactrequest 48 hours later, and the App deletes all of the store's settings, groups, rules, price lists and applications. Access tokens are deleted at uninstall. - When a store's customer asks to be erased, Shopify sends a
customers/redactrequest and the App deletes that person's applications. - Database backups roll off within 6 months.
5. Your rights
If you applied for wholesale on a store, contact that store first: it controls your data and can update or delete it, and Shopify passes its data requests to us. You can also email us and we'll help. Merchants can request a copy or deletion of their store's data at any time at privacy@revsprintstudio.com.
6. Security
All traffic uses TLS, including the connection between the App and its database. Access to the hosting and database accounts is limited to the people who run the App and protected with two-factor sign-in, and credentials are kept in the hosting provider's secret settings. Shopify requests are verified with Shopify's signatures before the App acts on them.
7. Changes
We'll update this page and its effective date if anything changes, and tell merchants in the App before material changes take effect.
8. Contact
RevSprint Studio · privacy@revsprintstudio.com