Privacy Policy

Tradewall ("we", "us") is a Shopify app built by 8th Origin LLC that runs wholesale/B2B for a merchant's store — custom buyer-tier pricing, self-serve wholesale registration, lock/hide rules, net terms, a sales-rep cockpit, and a catalog builder — without editing theme code. This policy explains what we collect, how we use it, and the choices you have.

What we collect

• Store information — your .myshopify.com domain, provided by Shopify when you install.
• Staff account — the name and email of the staff member who installs or configures Tradewall, from your Shopify session, used only to authenticate you into the app.
• App configuration — your buyer tiers, price rules, quantity breaks, lock/hide rules, net-terms plans, and catalog documents. This is data you create.
• Wholesale registration requests — when a buyer applies through your registration form, we store the company name, contact name, email, phone, and note they submit, on your behalf. You are the controller of this data; we process it only so you can approve or reject the application.
• Sales reps — the rep names, emails, and commission rates you enter to run the rep cockpit.
• Shopify B2B data — companies, company metafields, products, and prices read from Shopify's API to apply tier pricing, link approvals to Companies, and build draft orders and catalogs.

How we use it

Solely to operate the app for you: apply wholesale pricing, process registration approvals into real Shopify Companies, enforce your lock rules, run rep draft orders with commission, and build catalogs. We do not sell data or use it for advertising.

Retention and deletion

Uninstalling Tradewall purges your configuration, registration requests, rep data, and catalogs immediately via the uninstall webhook, and Shopify's mandatory shop/redact webhook removes anything remaining within 48 hours. A buyer's registration data is removed when you reject/delete it or when Shopify sends a customers/redact request for that buyer.

Sharing

Data lives in our database hosted on Neon (Postgres, US region) and the app runs on Vercel. No other third parties receive your data.

Security & incident response

All traffic is encrypted in transit (TLS), and registration and wholesale records are stored on managed infrastructure that encrypts data at rest. Access to personal data is limited to the operator of the service. If we become aware of a security incident affecting personal data, we will investigate promptly and notify affected merchants without undue delay.

Contact

Questions or data requests: danny@8thorigin.com.