Privacy Policy

1. About BuyerApprove

BuyerApprove is a Shopify application that enables merchants to configure B2B purchase approval controls before checkout. Merchants can assign authorized requesters and approvers, configure company-level approval thresholds, review purchase requests and control whether eligible B2B purchases may proceed to checkout.

BuyerApprove is provided and operated by Ecommerce Storez.

2. Information we process

BuyerApprove processes only information reasonably necessary to provide purchase approval functionality. Depending on how a merchant configures the app, this may include:

• Shopify store information, including the store domain and application installation information.
• Shopify B2B company identifiers, company names and configuration settings.
• Company contact identifiers and, where available, contact names and email addresses for authorized requesters and approvers.
• Purchase approval settings, including approval thresholds, currency and whether approval controls are enabled.
• Purchase request information, including product and variant identifiers, product titles, SKU, quantities and purchase amounts.
• Request status information such as pending, approved, rejected, cancelled, expired or completed status.
• Approval activity and audit information, such as who submitted or decided a request and when the action occurred.
• Technical information required to match an approved purchase to the corresponding cart, including cart fingerprints and related identifiers.
• Authentication, session and technical metadata required to securely operate the application and communicate with Shopify.

BuyerApprove does not require merchants to provide customer payment card numbers, bank account details or payment credentials to BuyerApprove.

3. Secure approval links

When an approval request is created, BuyerApprove may generate a secure approval link for an authorized approver. Approval tokens used by the application are stored in hashed form rather than storing the raw approval token in the application database.

Approval links may expire and are intended only for the authorized recipient of the approval request.

4. How we use information

We use information processed through BuyerApprove for purposes including:

• Providing and operating the purchase approval workflow.
• Determining whether a B2B buyer is authorized to submit a purchase request.
• Sending approval requests to authorized approvers.
• Recording approval or rejection decisions.
• Verifying whether a cart matches an approved purchase before checkout.
• Displaying approval history and activity to the merchant.
• Operating, securing, troubleshooting and improving the application.
• Complying with legal, regulatory and Shopify platform requirements.

5. Transactional email

BuyerApprove may send transactional emails when a purchase approval is requested, approved or rejected. These messages may include the company name, purchase amount, requester or approver name and a secure link necessary to complete the approval workflow.

Email delivery may be performed through third-party email infrastructure acting as a service provider on our behalf.

6. Shopify and other service providers

BuyerApprove operates as an application connected to Shopify. Information may therefore be transmitted between BuyerApprove and Shopify as required to provide the application's functionality.

We may also use infrastructure, hosting, database, logging and email-delivery providers to operate the service. These service providers process information only as reasonably necessary to provide their services to us.

7. Billing information

If a merchant purchases a paid BuyerApprove plan, subscription billing is processed through Shopify. BuyerApprove may receive information about the merchant's subscription plan, billing status, trial status and related subscription metadata.

BuyerApprove does not receive or store the merchant's payment card number from Shopify billing.

8. Data sharing and sale of information

We do not sell merchant, customer, requester or approver personal information.

We do not share personal information with third parties for their independent advertising purposes.

Information may be disclosed where reasonably necessary to:

• operate BuyerApprove through service providers;
• comply with applicable law or a valid legal request;
• protect the security, rights or integrity of the application, merchants or users; or
• complete a business transaction such as a merger, acquisition or transfer of assets, subject to applicable legal requirements.

9. Data security

We use reasonable administrative, technical and organizational safeguards designed to protect information processed through BuyerApprove.

Communications with BuyerApprove are protected using HTTPS/TLS where applicable. Access to application systems and stored information is restricted to authorized personnel and services that require access to operate the application.

No method of electronic transmission or storage can be guaranteed to be completely secure, and therefore we cannot guarantee absolute security.

10. Data retention

We retain information for as long as reasonably necessary to operate BuyerApprove, provide approval history requested by merchants, maintain security, resolve disputes and comply with legal or regulatory obligations.

When a merchant uninstalls BuyerApprove or when we receive a valid deletion request through Shopify, applicable merchant and personal information is deleted, anonymized or otherwise handled in accordance with Shopify platform requirements and applicable law, subject to legitimate legal retention requirements.

11. Privacy requests

Merchants and individuals may have rights regarding their personal information depending on the laws that apply to them. These rights may include requesting access, correction, deletion or restriction of personal information.

Shopify may also forward privacy requests to BuyerApprove on behalf of merchants or customers. We process valid privacy requests in accordance with applicable legal and Shopify platform requirements.

12. International processing

BuyerApprove and its service providers may process information in countries other than the country in which a merchant or user is located. Where required, we take reasonable steps to ensure appropriate protections apply to international transfers of personal information.

13. Cookies and session technologies

BuyerApprove may use cookies, session identifiers and similar technologies where necessary for authentication, security, application functionality and maintaining a valid Shopify application session.

BuyerApprove does not use application data to build advertising profiles for third-party advertising.

14. Merchant responsibilities

Merchants are responsible for ensuring they have an appropriate legal basis to provide BuyerApprove with information relating to their customers, company contacts, requesters and approvers.

Merchants are also responsible for configuring requester and approver permissions appropriately and ensuring that authorized company contacts have access only to information they are permitted to review.

15. Children's privacy

BuyerApprove is a business application intended for merchants and business purchasing workflows. It is not designed for use by children.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to BuyerApprove, applicable law or our data-processing practices.

If we make material changes, we will update the effective date shown at the top of this page.

17. Contact us

Questions or requests regarding this Privacy Policy or BuyerApprove's privacy practices can be sent to:

Ecommerce Storez
Email: tracy@ecommercestorez.com