Privacy Policy

1. Overview & Commitment

ToroSachi ("we", "our", or "us") provides subscription billing management, customer portal self-service, dunning recovery, and analytics for merchants using the Shopify platform. This Privacy Policy details how we handle merchant and subscriber data when you install and use the ToroSachi Subscriptions application.

2. Data We Collect

To deliver subscription management and billing services, ToroSachi collects data via Shopify's standard Admin and Storefront APIs strictly within authorized scopes:

• Merchant Account Information: Store domain, merchant contact email, timezone, currency, and store identifier.
• Subscription & Order Information: Subscription contract identifiers, line items, billing schedules, order totals, and fulfillment statuses.
• Subscriber Information: Customer identifiers, shipping addresses, customer emails (used solely for order notifications and portal authentication), and tokenized payment method references provided securely by Shopify.

3. How We Use Data

Collected data is used solely to provide core subscription services, including:

• Executing scheduled recurring billing cycles via Shopify Subscription APIs.
• Powering self-service subscriber management in the customer portal (pause, skip, swap, frequency adjustments).
• Automating failed payment dunning recovery and retry cadences.
• Delivering store-level subscription retention and cohort analytics.

4. SMS / Text Messaging Program

When a customer consents directly to ToroSachi, ToroSachi sends transactional text messages about subscriptions the customer manages through the ToroSachi customer portal (for example, a failed-payment notice with a secure payment-method update link). A message may name the store tied to the affected subscription so the customer knows which subscription needs attention; ToroSachi remains the sender of the messaging program. Message frequency varies with account activity and is capped. Message and data rates may apply. Customers can reply STOP at any time to opt out and HELP for help. Opt-outs are honored immediately and permanently unless the customer opts back in. Phone numbers and consent records collected for this program are never shared with or sold to third parties for their marketing purposes; text-messaging originator opt-in data and consent are not shared with any third party.

5. Multi-Tenant Data Isolation & Security

We enforce strict multi-tenant isolation across all databases and caching layers. All merchant data is partitioned by unique tenant IDs, and all API calls require authenticated and scoped HMAC or cryptographic session tokens. We do not sell, rent, or cross-monetize merchant or customer data.

6. GDPR & CCPA Compliance (Data Deletion & Redaction)

ToroSachi fully adheres to mandatory Shopify GDPR compliance protocols:

• Customer Redaction: When a customer redaction request is received via Shopify webhooks, all corresponding personal records (captured emails, tracking logs, portal credentials) are purged across our database within 48 hours.
• Shop Redaction: Upon app uninstallation and subsequent shop redaction requests, all store credentials, configurations, and PII are permanently erased.

7. Contact Us

If you have questions about this Privacy Policy or your data, contact our data protection team at privacy@torosachi.com.