Privacy policy.

BTB App Studio ("we," "us," or "our") operates the BTB Wholesale (the "App") for Shopify merchants and the marketing website at btbwholesale.com. This privacy policy explains what data we collect, how we use it, and your rights over it.

1. Information we collect

1.1 Information from the Shopify store you install on

When you install BTB on your Shopify store, we receive a limited set of your store's data through Shopify's APIs, under the scopes you authorize at install. This includes:

• Store domain, plan name, and shop owner contact details
• Product, variant, and collection data (used to configure your wholesale rules)
• Customer profile data including names, email addresses, and customer tags (used to target tag-based rules)
• Order data (used to count app-driven orders against your BTB plan limits)
• The configuration you create within BTB: rules, tier definitions, gate settings, message text, etc.

We do NOT collect or store: customer payment card numbers, full customer billing addresses beyond what's required to enforce a shipping rule you've configured, or any personal data beyond what's required to operate the BTB features you've enabled.

1.2 Information from visitors to the BTB marketing website

When you visit btbwholesale.com, we collect:

• Anonymized usage analytics (page views, session duration, referring source) via Plausible Analytics, which does not set cookies and does not collect personal data.
• If you opt into our newsletter (where applicable) or contact us via email, we collect the email address and message you send.

We do NOT use third-party advertising trackers, retargeting pixels, or behavioral profiling tools on the marketing site.

2. How we use your data

• To operate the BTB App on your storefront. Your configuration data and customer/product data are used to enforce the wholesale rules you've configured.
• To count orders for billing. We count orders that use BTB features to determine your plan tier and apply the correct subscription charge through Shopify.
• To send service emails. Billing notices, plan-limit warnings, security alerts, and material changes to the App or these terms.
• To respond to support requests. When you contact us, we use your message and any context you provide to help you.
• To improve the App. Aggregated, anonymized usage data tells us which features get used, where merchants get stuck, and what we should fix next. We do not look at individual store data for product decisions.

We do NOT: sell, rent, or share your data with third parties; use your data to train machine-learning models; target you with third-party advertising.

3. How we store your data

Configuration data is stored in two places:

• Shopify metafields on your own store. Rules, settings, and per-product configuration that BTB needs to read quickly on the storefront. This data lives in your Shopify database, not ours.
• Our backend infrastructure (Cloudflare Workers + Workers KV, primarily). App-side configuration, dashboard data, RFQ submissions, and analytics aggregates. Encrypted in transit (HTTPS / TLS 1.2+) and at rest.

Backups are encrypted and stored for 30 days for disaster recovery. We follow industry-standard security practices including encrypted transport, encrypted storage, and limited internal access on a least-privilege basis.

4. Data retention and deletion

When you uninstall BTB from your Shopify store:

• Configuration stored in Shopify metafields stays with your store. You can delete these via Shopify admin or leave them — they don't affect your store unless BTB is reinstalled.
• Configuration stored on our backend is wiped within 48 hours, per Shopify's GDPR data-processor requirements. This deletion is automatic on uninstall.
• RFQ submissions and analytics aggregates are wiped on the same 48-hour timeline.

You can request earlier deletion or export of your data at any time by emailing hello@btbwholesale.com. We will process verified requests within 30 days, or sooner where legally required.

5. Customer data (data about your buyers)

BTB handles customer data from your Shopify store under the role of a data processor. Your store is the data controller — you determine what data is collected from your buyers and for what purpose. BTB processes that data on your behalf to operate the features you've configured.

When your buyer exercises a privacy right (data access, deletion, portability) under GDPR, CCPA, or similar law, Shopify forwards the request to all installed apps including BTB. We honor these requests within the timelines required:

• Customer data request: We provide a copy of any data we hold about that customer within 30 days.
• Customer data deletion: We delete data about that customer within 10 days.
• Shop data deletion (on uninstall): We delete all data about the shop within 48 hours.

6. International data transfers

BTB is operated from the United States. By using the App, you consent to the transfer of your data to and processing in the United States. We use Standard Contractual Clauses and other safeguards required by applicable law (including GDPR) for international transfers of data subject to those laws.

7. Subprocessors

We use a small number of third-party services to operate BTB. Each is bound by a Data Processing Agreement that requires them to handle your data only on our instructions and to industry-standard security requirements. Our current subprocessors:

• Cloudflare (Workers, Workers KV, R2) — application hosting and storage
• Shopify — the platform we integrate with; data flows between Shopify and BTB via authorized APIs
• Plausible Analytics — anonymized website analytics (marketing site only)

We notify customers in advance if we add a new subprocessor that would have access to merchant or customer data.

8. Cookies and tracking

The BTB marketing site does NOT set tracking cookies. We use Plausible Analytics, which is cookieless and does not track individual users across sessions. We do not embed third-party advertising or retargeting pixels.

The BTB admin interface (within your Shopify admin) uses session cookies for authentication. These cookies are essential to the functioning of the App.

9. Your rights

Depending on your jurisdiction, you may have rights including:

• The right to access data we hold about you
• The right to correct inaccurate data
• The right to delete data
• The right to data portability
• The right to object to processing
• The right to lodge a complaint with a supervisory authority (in the EU)

To exercise any of these rights, email hello@btbwholesale.com.

10. Children

BTB is a B2B tool. It is not directed at children under 16, and we do not knowingly collect data from children.

11. Changes to this policy

We will update this policy as needed. Material changes will be announced via the BTB dashboard, email to merchants, and an updated date at the top of this page. Continued use of the App after a policy update constitutes acceptance of the updated policy.

12. Contact

Questions about this policy, or any privacy request, can be sent to hello@btbwholesale.com.