Wholesale Approvals — Privacy Policy

This Privacy Policy explains how Wholesale Approvals ("we", "us") handles information when a merchant installs and uses the Wholesale Approvals Shopify app (the "Service"). By installing the Service, you agree to this policy.

Information we process

• Wholesale application data:when a business applies for a wholesale account through the merchant's public application form, we store the information they submit — company name, contact first and last name, email, and any optional fields the merchant has enabled (tax/VAT ID, business type, expected order volume, company website, business address, notes). The submitter's IP address is also recorded briefly, solely to rate-limit repeated submissions and deter spam.
• Approval decisions: the status the merchant assigns to each application (pending, approved, rejected) and when it was reviewed.
• Form settings: which optional fields a merchant has chosen to show on their public application form.
• Session data:standard Shopify app authentication tokens needed to keep the app installed and connected to the merchant's store.

How we use information

• To show the merchant a queue of pending, approved, and rejected wholesale applications.
• When a merchant approves an application, to create a corresponding Company and main contact in the merchant's Shopify admin via Shopify's Admin API, so the applicant can be set up as a B2B buyer.
• To let the merchant customize which fields appear on their public application form.
• To operate and secure the Service.

We do not use this data for advertising, profiling, or any purpose beyond the app's core functionality, and we do not sell it.

Billing

Subscription billing is handled entirely through Shopify's own Billing API, as part of the merchant's existing Shopify subscription. We never see or store payment card details.

Sharing & subprocessors

We share data only with Shopify, as the platform the Service runs on and where approved applications become Company/customer records, and our hosting provider. We do not sell personal data to third parties.

Data retention & security

Application data is retained for as long as the app remains installed. If a merchant uninstalls the app, we delete their stored session and application data. If an applicant's data-deletion request reaches us through Shopify's customer redaction process, we delete the application records matching that person's email. We use industry-standard measures to protect data, though no system is perfectly secure.

Your rights

Merchants can review, approve, or reject applications at any time from the app, and can request deletion of stored application data by uninstalling the app or contacting us directly. Applicants who submitted a wholesale application can request access to or deletion of their data by contacting the merchant they applied to, or us directly.

Contact

Questions? Email support@foxrate.io.