Privacy Policy — Velo: Wholesale & Net Terms

1. Overview & Scope

Velo: Wholesale & Net Terms (“the App”, “we”, “our”) provides wholesale pricing tiers, B2B company registration workflows, volume quote requests, quick order pads, and Net Terms draft order automation for merchants operating on the Shopify platform. This Privacy Policy describes how we collect, process, store, and purge information when a merchant installs or uses the App and when wholesale buyers interact with storefront blocks.

2. Information We Collect

• Merchant Session & OAuth Tokens: When you install the App, we store your Shopify store domain (shop), OAuth access tokens, granted scopes, and session state in an encrypted managed PostgreSQL database via Prisma solely to authenticate Shopify Admin GraphQL API requests.
• B2B Wholesale Applicant Details: When a prospective buyer submits the Wholesale Registration form on a merchant's storefront, we process their name, business email address, company name, Tax ID / VAT / EIN number, estimated monthly spend, and sanitized application notes.
• Custom Volume Quote Payloads: When a buyer submits a Request-a-Quote inquiry, we process their contact email, product/variant identifiers, requested quantity, target unit price, and inquiry notes.
• Wholesale Configuration & Custom Price Lists: Discount percentages, customer tags, minimum order rules, and SKU-level wholesale overrides are stored directly inside the merchant's own Shopify Shop Metafields (namespace b2b_wholesale).

3. Zero Third-Party Data Selling or Sharing

We never sell, rent, trade, or monetize merchant data or wholesale buyer Personal Identifiable Information (PII) with any third parties, ad networks, or data brokers. All B2B applicant and quote data remains strictly isolated within the respective merchant's Shopify Shop Metafields and Shopify Draft Order / Customer records.

4. Customer Data Protection (GDPR, UK GDPR & CCPA Compliance)

In strict compliance with the European Union General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Shopify App Store mandatory privacy standards, the App implements automated, HMAC-verified webhook handlers at /webhooks:

• Right of Access (CUSTOMERS_DATA_REQUEST): Acknowledges and logs merchant or buyer data portability requests immediately with a 200 OK response.
• Right to Erasure (CUSTOMERS_REDACT): Automatically scrubs matching buyer email records from the merchant's b2b_wholesale.applications and b2b_wholesale.quotes JSON metafield ledgers upon receiving a redaction webhook.
• Shop Data Erasure (SHOP_REDACT & APP_UNINSTALLED): Immediately deletes all merchant OAuth sessions from PostgreSQL and purges the b2b_wholesale metafield namespace when a store uninstalls the App or triggers a shop redact event.

5. Security Measures

All storefront submission endpoints (/api/quote and /api/register) enforce strict Origin/Referer domain verification, HTML/XSS entity stripping, numeric bounds validation, and automated IP rate-limiting. All webhook payloads are cryptographically verified using Shopify's X-Shopify-Hmac-Sha256 signature verification before execution.