Privacy Policy

1. Overview

The App enables merchants to create product subscriptions, membership programs, product bundles, Single BYOB and Multi BYOB experiences; manage recurring contracts and customers; provide a self-service customer portal; send lifecycle communications; and review operational and performance information.

We generally act as a service provider or data processor for the merchant. The merchant determines why customer information is processed and which App features are enabled. By installing or using the App, the merchant acknowledges this Privacy Policy.

2. Information We Collect and Process

Store, Merchant, and Installation Information

• Store name, domain, public storefront domain, store identifier, locale, currency, timezone, contact details, and installation or session information.
• App plan, billing status, configuration, feature entitlements, theme and widget settings, portal settings, notification preferences, and activity records.
• Support requests, including the submitter's name, email, topic, priority, message, and store context.

Products, Programs, and Storefront Information

• Product, variant, and collection identifiers; titles; handles; images; prices; inventory status; and assignment information.
• Program names, selling-plan identifiers, delivery and billing schedules, trial periods, pricing rules, discounts, shipping rules, inventory policies, and storefront labels.
• Membership products, access tags, benefits, rewards, eligibility rules, events, concierge settings, and priority-support settings.
• Bundle products, variants, groups, selection limits, quantities, pricing rules, layout settings, customer selections, and dedicated bundle-page configuration.

Customer, Order, and Subscription Information

• Customer identifiers, name, email address, phone number, addresses, tags, locale, notification preferences, and customer-account references.
• Order identifiers, order names, dates, status, currency, totals, line items, quantities, discounts, shipping information, and related transaction status.
• Subscription contract identifiers, status, products, quantities, frequency, billing and delivery dates, renewal history, skipped cycles, cancellation information, and customer-requested changes.
• Membership access, benefit eligibility, rewards, claims, event registrations, concierge requests, support requests, and associated activity history.
• Customer portal tokens or signed-session information used to authenticate access to the correct store and customer workspace.

Communications, Analytics, and Technical Information

• Email templates, sender configuration, recipient information, scheduled messages, delivery status, failure reasons, and communication logs.
• Aggregated or store-scoped metrics such as recurring revenue, renewals, order outcomes, payment health, program performance, customer risk, and forecasts.
• IP address, request metadata, browser or device information, timestamps, error logs, audit events, and security information where generated by hosting or application systems.
• API token metadata, scopes, creation and revocation history. Secret token values are intended to be displayed only when created and stored using security safeguards.

We do not collect or store full customer payment card numbers or card security codes. Payment methods, checkout, subscription billing, and merchant app charges are handled by the commerce platform and its approved payment systems. The App may process payment-method references, payment status, or update links needed to support subscription management.

3. How We Use Information

• Authenticate merchants, maintain store-scoped sessions, and provide the embedded administration experience.
• Create, synchronize, display, and manage subscription, membership, and bundle programs and selling plans.
• Render storefront widgets, membership experiences, bundle pages, and customer-account entry points.
• Create and reconcile recurring contracts and orders, calculate schedules and pricing, and process merchant- or customer-requested subscription actions.
• Provide customer portal access and enabled actions such as viewing, pausing, resuming, skipping, changing quantity or frequency, swapping eligible products, editing eligible bundle items, or cancelling.
• Apply membership access rules, benefits, rewards, events, concierge services, and customer tags configured by the merchant.
• Send lifecycle, renewal, payment, membership, portal, and operational emails and maintain delivery records.
• Generate dashboards, analytics, forecasts, exports, imports, operational insights, and activity histories.
• Enforce App plan limits, prevent abuse, secure the App, diagnose errors, provide support, and meet legal obligations.

4. Optional AI-Assisted Features

If a merchant uses an AI-assisted feature, the App may send a limited, purpose-specific set of store metrics and configuration context to an AI service provider to generate suggestions. We design these requests to exclude passwords, API tokens, raw payment details, and unnecessary customer-identifying information. AI-generated suggestions are advisory and must be reviewed by the merchant before use.

5. Legal Basis and Merchant Responsibilities

Depending on applicable law, processing may be based on performance of a contract, legitimate interests in providing and securing the App, legal obligations, or consent where required. Merchants are responsible for having an appropriate legal basis for processing customer information and sending communications through the App.

Merchants should describe their subscription, membership, rewards, portal, email, and customer-data practices in their own privacy notices and comply with applicable privacy, consumer protection, electronic communication, automatic renewal, cancellation, and marketing laws.

6. Data Sharing and Service Providers

We do not sell, rent, or trade personal information. We may disclose information only:

• To the commerce platform and its services where necessary to operate installation, checkout, products, orders, selling plans, subscription contracts, billing, themes, customer accounts, and compliance workflows.
• To hosting, database, infrastructure, email delivery, monitoring, support, analytics, or optional AI providers that process information for us under appropriate contractual and confidentiality obligations.
• To the merchant that controls the relevant store and authorized users acting for that merchant.
• When required by law, legal process, regulatory request, or to protect customers, merchants, our rights, security, or the public.
• In connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to applicable legal requirements.

7. Data Retention and Deletion

We retain information for as long as reasonably necessary to provide the App, maintain security and audit history, resolve disputes, meet contractual obligations, and comply with law. Retention periods may differ by data type and merchant configuration.

After uninstall, we delete or anonymize store-related personal information within 30 days unless a longer period is required for legal, tax, billing, fraud prevention, security, dispute resolution, or compliance purposes. We process mandatory customer data requests, customer erasure requests, and store erasure requests received through the platform's compliance mechanisms.

8. Data Security

We use reasonable technical and organizational safeguards designed to protect information, including:

• HTTPS encryption for data in transit and secure authentication mechanisms.
• Store-scoped authorization and access controls designed to prevent cross-store access.
• Application, database, credential, token, logging, monitoring, and incident-response safeguards.
• Limited personnel and service-provider access based on operational need.

No method of transmission or storage is completely secure. We cannot guarantee absolute security, but we work to protect information using commercially reasonable measures.

9. International Data Transfers

Information may be processed in India and in other countries where we or our service providers operate. Where required, we use appropriate safeguards for international transfers and require service providers to protect information consistently with applicable law.

10. Privacy Rights and Requests

Depending on applicable law, individuals may have rights to access, correct, delete, restrict, object to processing, or obtain a copy of personal information. Customers should normally submit requests to the merchant from whom they purchased, because the merchant controls the customer relationship and can verify the request.

Merchants may contact us at wtsapps@webskitters.com for App-related privacy requests. We may request information necessary to verify identity, authority, store ownership, and the scope of the request.

11. Cookies and Similar Technologies

The App and its infrastructure may use essential cookies, signed sessions, local application storage, or similar technologies where necessary for authentication, security, navigation, preferences, and reliable operation. We do not use App data for unrelated behavioral advertising.

12. Children's Privacy

The App is intended for merchants and business users and is not directed to children under 13. We do not knowingly collect personal information directly from children. Merchants are responsible for ensuring that products and customer-data practices comply with laws applicable to their audience.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the App, service providers, legal requirements, or our practices. We will revise the Effective Date when changes are published. Where required, we will provide additional notice of material changes.

14. Contact Information