ShopHelm Wholesale privacy policy

ShopHelm Wholesale is a Shopify app for wholesale pricing. A Shopify merchant installs it to set prices, order rules, and payment terms for their wholesale buyers. This policy explains what the app collects, why, who it shares it with, and how it is deleted. The merchant who installs the app is the controller of their store's data; ShopHelm Wholesale processes it on the merchant's behalf.

What the app collects

Whose	What	Why
The merchant's store	Store domain, Shopify access tokens, the store's contact email, and the app's settings: customer groups, pricing rules, pack sizes, order minimums, wholesale-only products, payment terms, quotes.	To run the app and to publish prices and order rules to the store's checkout.
The merchant's staff	Shopify staff user ID, and name and email when the merchant assigns staff a role (quote approvals). A log of who changed what in the app.	Approvals, and the store's activity log.
The store's customers	Shopify customer IDs, the tags that place them in a group, contract prices set for them, for invoice orders the order ID and the amount still owed, and on a quote the buyer's name and email if staff type them in. The app does not read customers' names, addresses, or phone numbers from Shopify.	To give each buyer their price and payment terms at checkout, and to apply credit limits.
Wholesale applicants	What an applicant types on the merchant's wholesale application form: typically name, email, company, and the answers the merchant asked for.	So the merchant can review the application, and to email the applicant a confirmation link and the decision.
Connected AI tools	The name of a tool the merchant connects (for example Claude), and hashed access tokens.	So the merchant's own AI tools can read and propose pricing changes.

The app does not collect payment card details, does not set cookies on the storefront, and does not track storefront visitors. Request addresses are held in memory for a few minutes to limit abuse and are not stored.

Who the app shares data with

Data is never sold and never used for advertising. These service providers process it on the app's behalf:

Provider	Purpose	What it receives
Railway	Hosting and database	Everything the app stores.
Anthropic	The AI features: the rule builder, application review, the assistant, the weekly digest	The merchant's request, product and collection names, group names, aggregate sales figures, customer IDs, and everything a wholesale applicant typed on the form, which can include their name and email. Not customers' names or emails from Shopify. Anthropic does not train its models on this data.
Resend	Email	The recipient's email address and the message: the merchant's digest and approval requests, and an applicant's confirmation and decision.
Shopify	The platform the app runs on, including Sidekick, the assistant in the Shopify admin	Prices, rules, and terms written back to the store, and the app's usage for billing. When a merchant asks Sidekick about their wholesale setup, the app answers with its rules, groups, order rules, terms, invoice totals, and pending applications (form, date, and AI recommendation only; no names, emails, or answers).

The merchant can turn AI off in the app's Settings; with AI off, nothing is sent to Anthropic.

How long it is kept, and deletion

Security

Data is encrypted in transit (TLS) and at rest in the hosting provider's database. Access tokens for connected AI tools are stored hashed. Only the developer has access to the production systems.

Your rights