Privacy Policy

1. Overview & Commitment

ToroSachi ("we", "our", or "us") provides subscription billing management, customer portal self-service, dunning recovery, and analytics for merchants using the Shopify platform. This Privacy Policy details how we handle merchant and subscriber data when you install and use the ToroSachi Subscriptions application.

2. Data We Collect

To deliver subscription management and billing services, ToroSachi collects data via Shopify's standard Admin and Storefront APIs strictly within authorized scopes:

• Merchant Account Information: Store domain, merchant contact email, timezone, currency, and store identifier.
• Subscription & Order Information: Subscription contract identifiers, line items, billing schedules, order totals, and fulfillment statuses.
• Subscriber Information: Customer identifiers, shipping addresses, customer emails (used solely for order notifications and portal authentication), and tokenized payment method references provided securely by Shopify.

3. How We Use Data

Collected data is used solely to provide core subscription services, including:

• Executing scheduled recurring billing cycles via Shopify Subscription APIs.
• Powering self-service subscriber management in the customer portal (pause, skip, swap, frequency adjustments).
• Automating failed payment dunning recovery and retry cadences.
• Delivering store-level subscription retention and cohort analytics.

4. Multi-Tenant Data Isolation & Security

We enforce strict multi-tenant isolation across all databases and caching layers. All merchant data is partitioned by unique tenant IDs, and all API calls require authenticated and scoped HMAC or cryptographic session tokens. We do not sell, rent, or cross-monetize merchant or customer data.

5. GDPR & CCPA Compliance (Data Deletion & Redaction)

ToroSachi fully adheres to mandatory Shopify GDPR compliance protocols:

• Customer Redaction: When a customer redaction request is received via Shopify webhooks, all corresponding personal records (captured emails, tracking logs, portal credentials) are purged across our database within 48 hours.
• Shop Redaction: Upon app uninstallation and subsequent shop redaction requests, all store credentials, configurations, and PII are permanently erased.

6. Contact Us

If you have questions about this Privacy Policy or your data, contact our data protection team at privacy@torosachi.com.