Privacy Policy for Vault

This Privacy Policy describes how InturaHQ ("we", "us", or "our") collects, uses, and discloses information specifically related to your use of the Vault Shopify Application ("the App").

Vault is a B2B application designed to manage customer logins and enforce price-locking rules on Shopify stores. To provide these services, the App requires access to specific data from the Merchant's store and their end-customers.

1. Information We Collect

We collect the following types of information to facilitate the functionality of the App:

A. Merchant Information

When you install the App, Shopify automatically provides us with:

• Store information (myshopify.com domain, store name).
• Contact information ( the store owner's email address).

B. End-Customer Information (B2B Data)

To perform B2B login authentication and price locking, the App processes data related to your store's customers. This includes:

• **Customer Identifiers:** We process Customer IDs and Customer Tags supplied by Shopify to determine access levels and pricing tiers.
• **Authentication Tokens:** We handle secure tokens exchanged with Shopify to verify user sessions for B2B portals. We do not store raw customer passwords.
• **Pricing Configurations:** We store rules you define linking specific customer tags to specific product prices or discounts.

2. How We Use Your Information

We use the collected information strictly for the purpose of providing the App's services:

• **Service Provision:** To authenticate B2B customers against your defined rules and to dynamically adjust product pricing based on their customer tags.
• **Communication:** To contact merchants regarding critical App updates, security alerts, or support requests.
• **Improvement:** To analyze usage patterns anonymously to improve the performance and stability of our infrastructure.

3. Sharing Your Information

We do not sell Merchant or End-Customer data. We only share data in the following circumstances:

• **With Shopify:** The App's core functionality relies on continuous data exchange with the Shopify platform.
• **Service Providers:** We use trusted third-party infrastructure providers to host our application and databases ( [ AWS, DigitalOcean]). These providers are contractually bound to protect data and only process it according to our instructions.
• **Legal Requirements:** We may disclose information if required by law, subpoena, or other legal process.

4. Data Retention

We retain your data only for as long as the App is installed on your Shopify store. Upon uninstallation, Shopify sends us a webhook notification. We will delete all store-specific configurations and associated data from our servers within [30 days] of receiving this notification, or sooner upon request, unless legally required to retain it.

5. Your Rights

If you are located in the European Economic Area (EEA), the UK, or certain US states (like California), you have certain rights regarding your personal data, including the right to access, correct, or delete the data we hold. Merchants may contact us directly to exercise these rights. End-customers of a merchant's store should direct data subject requests to the merchant directly.

6. Contact Us

For any questions regarding this Privacy Policy or our data practices, please contact us at:

InturaHQ
Email: prs4912@gmail.com