Privacy Policy

Last updated: March 27, 2026

Wholesale Pilot ("the App") is built and maintained by Birdfish Digital. This policy explains what data we collect, how we use it, and your rights.

What data we collect

When you install the App, we access the following through the Shopify API:

Order data (order number, amounts, line items, dates, tags)
Customer data (name, email address associated with orders)
Shop information (store name, domain, currency)

We do not collect payment card details, passwords, or sensitive personal information beyond what Shopify provides through its API.

How we use your data

To display wholesale account insights within the App
To generate AI-powered email drafts and reorder suggestions
To track invoice and payment status for your wholesale accounts
To identify lapsed or at-risk buyer accounts

AI features are powered by Anthropic's Claude API. Order and customer data may be sent to the Claude API to generate email drafts and account briefs. This data is not stored by Anthropic beyond the duration of the API request.

Data storage

Your data is stored securely in a Supabase-hosted PostgreSQL database with row-level security enabled. Data is associated with your Shopify shop domain and is not shared with other merchants.

Data sharing

We do not sell, rent, or share your data with third parties for marketing purposes. Data is only shared with:

Anthropic (Claude API) for AI feature processing
Supabase for data hosting

Data retention and deletion

Your data is retained for as long as the App is installed on your store. When you uninstall the App, we receive a notification from Shopify and will delete your store data within 30 days.

You can request immediate deletion of your data at any time by emailing tom@birdfish.digital.

GDPR and merchant rights

You have the right to:

Request a copy of the data we hold about your store
Request correction of inaccurate data
Request deletion of your data

We respond to all data requests within 30 days. The App implements Shopify's mandatory compliance webhooks for customer data requests, customer redaction, and shop redaction.

Changes to this policy

We may update this policy from time to time. Continued use of the App after changes constitutes acceptance of the updated policy.

Contact

For privacy questions, contact Birdfish Digital at tom@birdfish.digital.