StorepassThis Privacy Policy explains how Atlas Alpha, Inc., doing business as Storepass (“Storepass,” “we,” or “us”), collects, uses, discloses, and protects personal information when you visit storepass.co, create or use a Storepass account, contact us, or otherwise interact with our software and services (the “Services”).
1. Our Role
Storepass acts as a controller or business for information about its own customers, prospects, website visitors, and account users. This includes account, billing, support, and website information, and this Policy applies directly to that processing.
Storepass also processes information on behalf of the merchants that use our Services. Merchant-managed information may include their customers, shoppers, employees, products, inventory, orders, point-of-sale transactions, buylist submissions, and communications (“Customer Data”). For Customer Data, the merchant is generally the controller or business and Storepass is its processor or service provider. If you want to exercise rights concerning Customer Data, contact the merchant you interacted with. We assist merchants with valid requests as required by our agreements and applicable law.
2. Information We Collect
Depending on how you interact with us, we may collect:
- Account and contact information: name, username, business name, email address, phone number, business address, job role, authentication identifiers, and account preferences.
- Billing and commercial information: plan, subscription status, invoices, transaction history, and limited payment details. Our payment provider processes complete card or bank credentials.
- Service and integration data: store configuration, products, inventory, prices, orders, customers, suppliers, marketplace records, connected account identifiers, API credentials or tokens, and data synchronized from services you choose to connect.
- Communications: support requests, emails, calls, feedback, and other messages you send us.
- Device, usage, and log information: IP address, browser and device type, operating system, pages or features used, dates and times, referring URLs, approximate location derived from IP address, cookie identifiers, and diagnostic, security, and error logs.
We collect information directly from you and other account users, automatically from devices and browsers, from merchants that use Storepass, from integrations you authorize, and from service providers and business partners. Please do not provide sensitive personal information unless it is necessary for a supported business purpose.
3. How We Use Information
We use personal information to:
- provide, configure, maintain, and support the Services;
- authenticate users, administer accounts, process payments, and communicate about subscriptions and transactions;
- operate requested integrations and synchronize Customer Data at the merchant’s direction;
- secure the Services, prevent fraud and abuse, troubleshoot errors, and enforce our agreements;
- analyze performance and improve features using information appropriate for that purpose, including aggregated or de-identified data where practical;
- send product or marketing communications where permitted; and
- comply with law, respond to lawful requests, resolve disputes, and protect rights, safety, and property.
Where European or UK data protection law applies, our legal bases are performance of a contract, our legitimate interests in operating and securing the Services, compliance with legal obligations, and consent where required. A merchant determines the legal basis for Customer Data it directs us to process.
4. How We Disclose Information
We may disclose personal information to:
- Service providers: companies that provide hosting, storage, databases, authentication, payment processing, email and text delivery, customer support, workflow, security, analytics, and error monitoring. These include providers such as Amazon Web Services, MongoDB, WorkOS, Stripe, SendGrid, and Twilio where applicable.
- Customer-selected integrations:ecommerce platforms, marketplaces, payment services, and other tools Customer connects, such as Shopify, BigCommerce, TCGplayer, CardTrader, and Mana Pool. The third party’s policy applies to its handling of information.
- The Storepass customer: account owners and authorized administrators may access information associated with their business account and users.
- Professional advisers and authorities:auditors, insurers, lawyers, courts, regulators, and law enforcement when reasonably necessary or legally required.
- Business transaction recipients: actual or prospective parties to a financing, merger, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.
We do not sell personal information for money. We do not sell or share Customer Data for cross-context behavioral advertising. Storepass marketing pages use Google advertising technology, which may collect online activity information as described below. Merchants may separately configure analytics or advertising pixels on their own storefront or buylist pages; the merchant is responsible for those choices and its privacy notices.
5. Cookies and Similar Technologies
We use cookies, local storage, and similar technologies to keep users signed in, remember settings, secure the Services, understand site performance, and measure advertising. You can control cookies through browser settings. Blocking necessary technologies may prevent parts of the Services from working.
Some browsers and extensions send Global Privacy Control (“GPC”) or other universal opt-out signals. Where applicable law requires it, we process a recognized signal as a request to opt out for that browser or device. Because there is no uniform standard for other “Do Not Track” signals, we do not currently respond to them.
6. Retention
We retain account and Customer Data while needed to provide the Services and for a reasonable period afterward to complete deletion, backups, and account closure. We retain billing, transaction, security, and legal records for the periods needed to comply with tax, accounting, fraud-prevention, dispute, and other legal obligations. Diagnostic and website records are generally kept for shorter operational periods unless needed to investigate an incident. We determine retention using the amount, nature, sensitivity, purpose, legal requirements, and risk associated with the information, then delete or de-identify it when it is no longer needed.
7. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure. Customers are responsible for managing authorized users, protecting credentials and devices, and configuring integrations and permissions appropriately.
8. International Data Transfers
Storepass is based in the United States, and we and our service providers may process information in the United States and other countries. Where required, we use recognized transfer mechanisms and safeguards, such as standard contractual clauses. Contact us for information relevant to a particular transfer.
9. Your Privacy Choices and Rights
Depending on where you live and subject to legal exceptions, you may have the right to know or access personal information, correct it, delete it, receive a portable copy, restrict or object to processing, opt out of sale, sharing, targeted advertising, or certain profiling, limit certain uses of sensitive personal information, withdraw consent, and appeal a denied request. You may also unsubscribe from marketing email using the link in the message. We may still send non-marketing account and service communications.
To submit a request about information Storepass controls, email contact@storepass.co. State that the request concerns privacy and identify the right you want to exercise. We may verify your identity and authority before acting. Authorized agents may submit requests where permitted by law. We will not discriminate against you for exercising a privacy right.
For information a merchant controls, contact that merchant first. If we deny a request that is eligible for appeal, you may appeal by replying to our decision or emailing the same address with “Privacy Appeal” in the subject. You may also complain to the privacy or data protection regulator where you live.
10. U.S. State Privacy Notice
In the preceding 12 months, we may have collected the following categories of personal information: identifiers; customer records; commercial information; internet or other electronic network activity; approximate geolocation; professional or employment information; and inferences drawn from account and usage information. We collect these categories from the sources in Section 2, use them for the purposes in Section 3, and disclose them to the recipient categories in Section 4.
Some account credentials, payment-related information, or precise information a customer chooses to submit may be treated as sensitive under state law. We use sensitive personal information only for permitted purposes such as authentication, payment processing, security, fraud prevention, and providing requested Services. We do not use it to infer characteristics about individuals.
Storepass has not sold personal information for money in the preceding 12 months. Advertising technology on our marketing pages may constitute “sharing,” “targeted advertising,” or a “sale” under some state laws even when no money changes hands. Where those laws apply, you may opt out through a recognized GPC signal or by contacting us. We do not knowingly sell or share personal information of people under 16.
11. Children
The Services are intended for businesses and are not directed to children under 13. We do not knowingly collect personal information directly from children under 13. Merchants that submit Customer Data are responsible for complying with laws that apply to that collection.
12. Changes to This Policy
We may update this Policy to reflect changes in our Services, practices, or legal obligations. We will post the updated Policy and revise the date above. If a change materially affects how we use personal information, we will provide reasonable advance notice and seek consent where required by law.
13. Contact Us
Atlas Alpha, Inc. (Storepass)
San Luis Obispo, California, United States
contact@storepass.co
Business customers may also contact us to discuss a data processing addendum or request more information about our service providers.