Privacy Policy

App: Wholesale Engine
Developer: Wholesale Engine
Last updated: June 9, 2026
Contact: wholesale@competetracker.com

1. Introduction

Wholesale Engine (“the App”) is a Shopify application that helps merchants manage B2B wholesale pricing, buyer accounts, and invoice receivables. This policy describes what data we collect, how we use it, and your rights.

2. Data we collect and store

From the merchant (shop owner)

• Shopify shop domain and shop ID
• OAuth access token (encrypted at rest)
• App subscription plan (Free or Pro)
• Product catalog metadata synced from Shopify (product/variant IDs, titles, SKUs, retail prices)
• Pricing configuration (tiers, matrix overrides, quantity breaks, contract prices)

From the merchant’s customers (wholesale buyers)

• Shopify customer ID, name, email, and company name
• Wholesale account status, tier, credit limit, balance, and payment terms
• Optional application message from the storefront apply form
• Email verification records for new buyer accounts (when enabled)

Order and invoice data

• Wholesale invoice records (amount due, status, due date, Shopify draft order / invoice URLs)
• Checkout idempotency keys to prevent duplicate submissions

Technical data

• Server logs (timestamps, shop domain, error diagnostics)
• Webhook payloads from Shopify (processed per Shopify’s API terms)

We do not collect buyer payment card data. Wholesale order payments are handled by Shopify checkout and invoicing, not by Wholesale Engine directly.

3. How we use data

• Provide wholesale pricing on the storefront via Shopify app proxy
• Process buyer applications and merchant approvals
• Create and track Net terms draft orders and receivables
• Send optional transactional emails when the merchant configures email delivery
• Enforce plan limits (Free: 3 approved buyers; Pro: unlimited)
• Comply with Shopify mandatory webhooks and applicable law

4. Data sharing

We do not sell personal data. Data is shared only with Shopify (as required to operate the app), infrastructure providers hosting the app, and SendGrid when the merchant enables transactional email.

5. Data retention and deletion

• When a merchant uninstalls the app, Shopify sends a shop/redact webhook and we delete the shop’s stored data.
• When a customer data deletion is requested, Shopify sends customers/redact and we delete matching wholesale buyer records.
• customers/data_request webhooks are logged and acknowledged per Shopify requirements.

6. Security

Access tokens are encrypted. API traffic uses HTTPS. Webhooks are verified with Shopify HMAC signatures.

7. Merchant responsibilities

Merchants are responsible for their privacy policies toward their customers, lawful use of buyer data, and accurate pricing and invoicing.

8. Changes

We may update this policy; the “Last updated” date will change. Continued use of the App after changes constitutes acceptance.

9. Contact

Questions: wholesale@competetracker.com