Privacy Policy

We collect information necessary to operate the Orderly Wholesale service:

• Shopify store data: Your store domain, access tokens, and product catalog information are collected during app installation via Shopify OAuth to enable Shopify integration features.
• Business information: Business name, logo, address, contact details, and invoice preferences you enter in Settings.
• Customer records: Wholesale company names, contacts, locations, and payment terms you enter into the portal.
• Order and invoice data: Order line items, quantities, prices, invoice numbers, payment status, and related notes.
• QuickBooks Online data: OAuth tokens and invoice identifiers when you connect your QuickBooks account.
• Email configuration: SMTP or Google Workspace credentials if you configure invoice email sending.

We use the information we collect to:

• Provide and operate the Orderly Wholesale portal
• Create, manage, and display wholesale orders and invoices
• Push orders and inventory data to your Shopify store on your behalf
• Create invoices in QuickBooks Online on your behalf
• Send invoice emails to your wholesale customers on your behalf
• Display live inventory levels from your Shopify store
• Provide customer support
• Comply with legal obligations

We do not use your data to train machine learning models, and we do not sell your data to third parties.

Your data is stored in Supabase, a managed PostgreSQL database service, hosted on infrastructure provided by Amazon Web Services. Each merchant's data is isolated by their Shopify store domain. OAuth tokens and API credentials are stored server-side and are never exposed in client-side code or responses.

We implement access controls to ensure that only authenticated requests from your store session can read or write your data.

Orderly Wholesale integrates with the following third-party services to provide its features. Each service has its own privacy policy:

• Shopify — for store authentication, order creation, and inventory access. shopify.com/legal/privacy
• Supabase — for database storage. supabase.com/privacy
• Vercel — for application hosting. vercel.com/legal/privacy-policy
• Intuit / QuickBooks Online — when you connect your QuickBooks account. intuit.com/privacy/statement
• Google — if you configure Google Workspace email sending. policies.google.com/privacy

We do not sell, rent, or trade your personal information. We may share data:

• With third-party service providers listed above, only as required to deliver the app's features
• When you explicitly use a feature that sends data to a connected service (e.g. pushing an order to Shopify)
• If required to comply with applicable law, regulation, legal process, or governmental request
• To protect the rights, property, or safety of Orderly Wholesale, our users, or the public

The wholesale customer records (company names, contacts, addresses) stored in Orderly Wholesale are entered by the merchant and belong to the merchant. We process this data solely on the merchant's behalf to operate the portal. Merchants are responsible for having appropriate legal basis to store and process their customers' information.

We retain your data for as long as your account is active or as needed to provide the service. If you uninstall the app, your data will be deleted within 48 hours in accordance with Shopify's mandatory data erasure webhook requirements.

You may request deletion of your data at any time by contacting us at privacy@orderlyapp.fyi.

Depending on your location, you may have rights under applicable data protection laws including:

• The right to access your personal data
• The right to correct inaccurate data
• The right to request deletion of your data
• The right to object to or restrict certain processing
• The right to data portability

To exercise any of these rights, contact us at privacy@orderlyapp.fyi.

Orderly Wholesale uses a single session cookie (shopify_embedded_session) to maintain your authenticated Shopify embedded session. This cookie is HttpOnly, Secure, and expires after 24 hours. We do not use advertising cookies or third-party tracking cookies.

Orderly Wholesale is a business-to-business service intended for use by adults operating Shopify merchant stores. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time. We will notify merchants of material changes by updating the "Last updated" date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

For privacy questions, data requests, or to exercise your rights, contact us at: