Privacy Policy

Last updated: June 9, 2026

This Privacy Policy explains how Turbo Checkout ("the App", "we", "us"), provided by Triad Mark, collects, uses, and protects information when a Shopify merchant installs and uses the App on their store.

1. Information we collect

When you install the App, and as you use it, we may collect:

• Store information — your myshopify.com domain and an access token issued by Shopify so the App can operate on your store.
• App configuration — your checkout form fields, bundles, discounts, payment, and OTP settings.
• Order & customer data — for orders placed through the App: customer name, phone number, delivery address, email (if provided), and order line items. This is processed to create the order on your Shopify store.
• Verification data — when WhatsApp OTP is enabled, the customer's phone number and a one-time code are processed to deliver and verify the code.

2. How we use information

• To create and manage orders on your Shopify store.
• To send and verify one-time passcodes over WhatsApp (when enabled).
• To apply bundles, quantity discounts, and shipping options you configure.
• To provide app functionality, support, billing, and to comply with legal obligations.

3. Sharing & sub-processors

We do not sell personal data. We share data only with service providers needed to run the App:

• Shopify — to read products and create/manage orders and customers on your store.
• WhatsApp messaging provider — to deliver verification codes to the customer's phone number when OTP is enabled.
• Hosting infrastructure — to operate and secure the App.

4. Data retention & deletion

We retain order and customer data only as long as needed to provide the App. We honor Shopify's mandatory data-privacy webhooks: customer data-request, customer redaction, and shop redaction. When you uninstall the App or 48 hours after a shop-redaction request, your store's data is deleted from our systems.

5. Security

Access tokens and provider credentials are stored encrypted at rest, traffic is served over HTTPS, and storefront requests are verified using Shopify's signed App Proxy and session tokens.

6. Your rights

Customers may request access to or deletion of their data through the merchant, who can trigger the request via Shopify. Merchants can contact us to exercise data rights for their store.

7. Changes

We may update this policy from time to time. Material changes will be reflected by the "Last updated" date above.

8. Contact

Questions about this policy: support@triadmark.com.