Privacy Policy

1. Overview

ShopConnect is a payment connector that enables merchants to process payments through their chosen payment processor while using their existing business software. To provide this service, we need to access certain data from your browser when you are on supported business software platforms. Where a merchant's staff use the ShopConnect Field mobile app, that app displays the invoice and customer records the merchant's own account has already synced, and is used to take payment in the field.

2. What We Collect

2.1 Account Information

When you create an account, we collect:

• Full name
• Email address (verified)
• Phone number
• Business name and address
• User role (merchant owner, manager, technician, ISO, agent, sub-agent)
• Referral/attribution code (if applicable)

2.2 Payment Processor Credentials

When you or your ISO/agent configure a payment processor, we collect:

• Processor API keys or authentication tokens
• Terminal identifiers (for card-present processors)
• Processor-specific configuration parameters

These credentials are encrypted at rest and are never exposed to the client-side application after initial entry. They are used solely to route payment requests to your configured processor.

2.3 Invoice Data (Read by the Extension)

When the extension is active on a supported business software platform, it reads:

• Invoice amounts and totals
• Invoice and estimate numbers
• Customer names associated with invoices
• Line item descriptions (where available)
• Due dates and payment status

2.4 Transaction Records

When a payment is processed through ShopConnect, we record:

• Transaction amount
• Timestamp
• Processor approval/authorization code
• Masked card identifier (last 4 digits only)
• Card brand (Visa, Mastercard, etc.)
• Entry method (chip, tap, keyed, etc.)
• Transaction status (approved, declined, voided, refunded)

2.5 Usage Data & Operational Telemetry

We collect standard usage data including:

• Pages visited within the console
• Extension activation events (which platforms are enabled)
• Crash reports via Sentry (PCI-scrubbed before transmission - see section 7)
• Browser type and version

The extension also sends operational writeback telemetry to our Supabase backend each time it attempts to record a payment back into your business software. This telemetry contains only: event name, platform, processor, amount, success/failure status, error code, elapsed time, merchant ID, and organization ID. Customer names, invoice numbers, customer emails, and transaction identifiers are stripped from this telemetry before it leaves your browser.

We do not collect browsing history, keystrokes, or data from websites other than supported business software platforms.

3. Chrome Extension Data Practices

This section specifically addresses data practices of the ShopConnect Chrome extension, as required by Google's Chrome Web Store Developer Program Policies.

3.1 When the Extension Activates

The extension only activates on domains listed in its configuration - these are the websites of supported business software platforms. The extension does not activate on, read data from, or interact with any other websites, including search engines, social media, email, banking sites, or personal browsing.

3.2 What the Extension Reads

On supported platforms, the extension reads only financial document data (invoice amounts, numbers, and associated customer names) necessary to facilitate payment processing. It does not read:

• Passwords or login credentials for your business software
• Personal browsing history or cookies
• Data from browser tabs other than the active supported platform
• Clinical, medical, or health records (for healthcare software platforms)
• Full payment card numbers, CVVs, or card expiration dates

3.3 Where Extension Data Goes

3.4 Google Limited Use Compliance

Specifically:

• Data read from business software platforms is used solely to facilitate payment processing as described in this Privacy Policy.
• Data is not used for serving advertisements or personalized marketing.
• Data is not sold to third parties, data brokers, or information resellers.
• Data is not transferred to any third party except as necessary to provide the Service (i.e., your configured payment processor) or as required by law.

3.5 Per-Platform Consent

Before the extension reads any data from a supported business software platform, the side panel displays an "Enable ShopConnect for [Platform]" consent banner for that specific platform. You must click Enable - an explicit user gesture - before Chrome grants access and the extension begins reading financial data. Each platform is authorized separately using Chrome's optional host permissions API; no broad browsing permission is granted at install time. You can revoke any platform's access at any time from chrome://extensions → ShopConnect → Site access, which immediately unregisters the corresponding content script and stops all data reads for that platform.

4. Mobile App (iOS) Data Practices

This section addresses the ShopConnect Field mobile app, used by a merchant's own staff in the field. It is a business tool for existing ShopConnect merchants; it has no consumer mode and no public content.

4.1 What the App Accesses

The app displays invoice and customer records that the merchant's own account has already synced. It does not read anything from the device beyond what the staff member enters. Specifically, the app does not request or access:

• Location or GPS
• The device address book or contacts
• Photos, camera, or microphone
• Any advertising identifier, and it presents no tracking prompt

4.2 Payment Card Data

Full card numbers, security codes and expiration dates never enter the mobile app. Card entry happens in one of three places, none of which is this app: inside the payment processor's own certified application, on a certified card reader that encrypts the card at the reader head, or on the processor's hosted payment page. The app receives only the result of a completed payment — the last four digits, the card brand, and an authorization code.

4.3 Where Mobile Data Goes

4.4 Diagnostics

The app can report application errors to ShopConnect's own error-reporting service to diagnose failures. Reports are automatically redacted before they are sent: card numbers, security codes, authentication tokens, terminal identifiers, and customer names, email addresses and phone numbers are removed. Error reports carry no account identifier and no device identifier, and are not used for advertising or shared with any data broker.

5. How We Use Your Data

We use collected data for the following purposes:

6. What We Do Not Do

We make the following commitments about your data:

• We do not sell your personal data to any third party, for any purpose, ever.
• We do not share your data with advertisers or use it for targeted advertising.
• We do not share your data with data brokers or information resellers.
• We do not store full credit card numbers. Card data flows directly from your browser, your terminal, or your payment processor's own app or hosted page to your payment processor's API and never touches our servers.
• We do not read your browsing history or monitor activity on non-supported websites.
• We do not use your data for profiling, scoring, or automated decision-making that produces legal effects.
• We do not store raw personally identifiable information in our analytics or observation systems.
• We do not engage in cross-site tracking for advertising or any other purpose.

6.1 Do Not Track Signals

ShopConnect does not currently respond to Do Not Track (DNT) signals from browsers, as no uniform standard for honoring DNT signals has been established. However, as stated above, we do not engage in cross-site tracking for advertising purposes regardless of your DNT setting.

7. Data Storage & Security

We implement the following security measures to protect your data:

• Encryption at rest - All payment processor credentials and sensitive data are encrypted at rest using industry-standard encryption.
• Encryption in transit - All communications between the extension, console, and our servers use TLS/HTTPS encryption.
• Access controls - Access to production data is restricted to authorized personnel on a need-to-know basis.
• Credential isolation - Payment processor API keys are never exposed to client-side code after initial entry.

While we implement commercially reasonable security measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.

8. Sub-Processors

We use the following third-party service providers ("sub-processors") to operate the Service. Each sub-processor is bound by data protection obligations no less protective than those in this Privacy Policy.

We will notify you of any material changes to our sub-processor list that may affect the processing of your data.

9. Data Retention

Upon account termination, we delete or anonymize your data within the timeframes above, subject to our legal retention obligations.

10. Your Privacy Rights

Regardless of your location, we honor the following data rights for all users:

• Right to Know / Access - Request a summary of the personal data we hold about you.
• Right to Correction - Request correction of inaccurate personal data.
• Right to Deletion - Request deletion of your personal data, subject to legal retention requirements.
• Right to Data Portability - Request a machine-readable export of your transaction data.
• Right to Opt Out - We do not sell your data, but you may confirm this status at any time.

How to Exercise Your Rights

Submit requests to aashil@shopconnectpro.com with the subject line "Privacy Rights Request." We will:

• Verify your identity before processing any request.
• Respond to verified requests within thirty (30) days.
• Extend the response period by an additional 30 days if necessary, with notice to you.

We will not discriminate against you for exercising your privacy rights. You will not receive a different level of service or pricing for making a request.

11. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the following additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know - You may request the categories and specific pieces of personal information we have collected about you, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share it.
• Right to Delete - You may request deletion of personal information we have collected, subject to legal exceptions.
• Right to Correct - You may request correction of inaccurate personal information.
• Right to Opt Out of Sale/Sharing - We do not sell or share (as defined by CCPA/CPRA) your personal information. No opt-out action is required.
• Right to Limit Use of Sensitive Personal Information - We use sensitive personal information (payment processor credentials) only as necessary to provide the Service.
• Right to Non-Discrimination - We will not deny, charge different prices, or provide a different quality of service because you exercised a CCPA right.

Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

To make a CCPA request, contact aashil@shopconnectpro.com. You may also designate an authorized agent to make a request on your behalf.

12. Healthcare Data (HIPAA)

For merchants in healthcare verticals (medical, dental, chiropractic, veterinary, physical therapy, mental health, etc.):

• The ShopConnect extension reads only financial data (invoice amounts, numbers, and patient names for invoice identification purposes).
• ShopConnect does not read, store, or transmit protected health information (PHI), clinical records, diagnosis codes (ICD-10, CPT), treatment details, or medical histories.
• ShopConnect is not a HIPAA covered entity or business associate as defined by HIPAA regulations, as we do not create, receive, maintain, or transmit PHI.

Merchants in healthcare verticals remain responsible for their own HIPAA compliance obligations.

13. SMS / Text Messaging

ShopConnect uses Twilio under our registered A2P 10DLC Brand SHOPCONNECT PRO LLC to deliver payment-related messages on behalf of merchants. Messages are strictly transactional: a one-time payment link for an invoice issued to you, and occasionally a request to update an expiring card on file. We do not send marketing or promotional text messages.

• How your number reaches us. You give your mobile number directly to the merchant you are doing business with - at the counter, on an intake or service-authorization form, or when your invoice is created. ShopConnect does not collect mobile numbers from consumers directly, and we never purchase, rent, append, or acquire numbers from third parties.
• How consent is obtained. Consent is enforced in our software, not assumed from your having been a customer. Before ShopConnect will send you any text, the merchant must clear a consent gate that displays the following disclosure and the exact number it would be sent to: "You'll receive a text with your invoice and secure payment link from us via ShopConnect. Message frequency varies. Message and data rates may apply. Reply STOP anytime to opt out, or HELP for help." The merchant is instructed to read or show you that wording first, and must then confirm that you heard or read it and agreed. The gate appears on every ShopConnect surface that can send a text, it cannot be disabled or pre-answered, and if the merchant declines, no message is sent.
• What we record. When consent is confirmed we store your number in standardised form against that merchant, the date and time, how consent was obtained, and an identifier for the exact disclosure wording you were given - so any message we send can be traced back to the specific consent event and the wording it was obtained under. The full consent experience, including the gate as it appears in the product, is published at shopconnectpro.com/sms-consent.
• Message frequency. Frequency varies and depends on your merchant's activity - typically one message per invoice, plus an occasional card-update request. Each merchant is limited to 100 SMS per 24 hours through ShopConnect by default, to protect against bulk messaging.
• Message and data rates. Message and data rates may apply. Standard rates from your wireless carrier apply to messages you receive; ShopConnect does not charge you to receive them. Carriers are not liable for delayed or undelivered messages.
• Opt out at any time. Reply STOP (or STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT, REVOKE, or OPTOUT) to any message to stop them. You will receive one confirmation and nothing after that. Opt-out is honored at the carrier level by Twilio. Reply HELP or INFO for help, or contact support@shopconnectpro.com.
• No sharing of mobile data. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All other categories of data exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. ShopConnect does not sell, rent, or share your mobile phone number, your SMS opt-in status, or the content of payment-related SMS. We share data only with the sub-processors strictly necessary to deliver the message (Twilio) and to process the resulting payment (the processor configured by your merchant), and never for their own marketing.
• Merchant account notifications. Separately, ShopConnect sends short account notifications by text to its own merchant account holders - for example, an alert to a shop owner when one of their invoices is paid. Those recipients are ShopConnect's contracted customers, who provide their mobile number and agree to service notifications during account setup, and can opt out the same way.
• Merchant responsibility. Each ShopConnect merchant is responsible for delivering the disclosure above and for having a lawful basis to text the consumers it enters into ShopConnect.

14. Children's Privacy

The Service is intended for use by businesses and their authorized adult employees. We do not knowingly collect personal information from children under the age of 13 (or 16 in applicable jurisdictions). If we become aware that we have collected personal information from a child, we will promptly delete that information.

15. International Data Transfers

Our servers and sub-processors are primarily located in the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States. By using the Service, you consent to this transfer.

For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data transfer restrictions, we rely on Standard Contractual Clauses or other appropriate safeguards as required by applicable law.

16. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Notify you via email or an in-console notification for material changes.
• Provide at least 30 days' notice before material changes take effect.

Your continued use of the Service after the effective date of an updated Privacy Policy constitutes your acceptance of the changes.

17. Contact Us

If you have questions about this Privacy Policy, want to exercise your data rights, or have a privacy concern, contact us:

• Company: ShopConnect Pro LLC
• Privacy Contact: aashil@shopconnectpro.com
• Subject Line: "Privacy Inquiry" or "Privacy Rights Request"
• Website: shopconnectpro.com