Privacy Policy

Last updated: October 13, 2026

This Privacy Policy describes how NerdLabs ("we," "us," or "our") collects, uses, and protects information through the CreditGate application ("the App"). CreditGate is a Shopify application that provides wholesale account approvals, credit-limit management, purchase-order enforcement, and sales-rep ordering for B2B merchants.

1. Information We Collect

1.1 Shopify Store Data

CreditGate requests only the minimum Shopify API access it needs:

• Products (read): so sales reps can pick products when placing an order on behalf of a wholesale account
• Draft orders (write): so approved rep orders are created as real draft orders in your store

CreditGate does not read your storefront orders, customer records, or company records through the Shopify API. Orders on terms are recorded through the App itself, where the wholesale account is already known.

1.2 Wholesale Account & Credit Data

To provide the App's core functionality, we store data that you and your wholesale applicants provide, including:

• Wholesale application details (business name, contact details, trade references, business type)
• Credit limits and the live exposure CreditGate calculates from open orders
• Purchase-order numbers and PO records
• Approval, rejection, and order-decision history

1.3 Sales-Rep Information

• Rep names, email addresses, and secure login links for the rep ordering portal (tokens are stored hashed)
• The accounts each rep is assigned to and the orders they place

1.4 Supporting Documents

1.5 Store Owner's Email

• The email address on the store owner's Shopify account (as set in Shopify — not your store's public contact email), your store's admin language, and whether the store is a Shopify development store

1.6 Support Messages

If you message us from inside the app (including a free setup or customization request), we store your messages, your shop domain, the reply-to email address and name you provide or that Shopify lists for your store, and your admin language — used only to answer you and to email you when we reply.

2. How We Use Your Information

We use the collected data exclusively to:

• Process wholesale account applications and create approved B2B accounts in Shopify
• Enforce the credit limits and PO rules that you define
• Calculate live credit exposure and hold or flag over-limit orders
• Power the sales-rep ordering portal and route orders for approval
• Maintain a per-account log of order decisions and payments
• Send you notifications about applications, holds, and account activity (if enabled)
• Email the store owner, using the store owner's email above: account alerts, a one-time welcome note when you upgrade to a paid plan, and a one-time note after you uninstall asking what we could improve
• Provide customer support, including in-app support messages and free setup and customization help
• Improve and maintain the App

3. Data Sharing and Disclosure

We do not sell, rent, or share your data with third parties for their marketing purposes. Your data may be shared only in the following circumstances:

• Service Providers: We use infrastructure providers (hosting, databases, file storage) that process data on our behalf under strict data processing agreements.
• Mailgun, our email provider, which delivers our emails to the store owner and our replies to your support messages (sent from support@nerdlabs.us) and so receives the store owner's email and the reply-to address you give us for support messages.
• Legal Requirements: We may disclose data if required by law, subpoena, or court order.
• Business Transfers: In the event of a merger or acquisition, data may be transferred as part of business assets.

4. Data Storage and Security

• Data is stored on secure servers with encryption at rest and in transit (TLS 1.2+).
• Uploaded certificates and documents are stored in access-controlled file storage.
• Access to production systems is restricted to authorized personnel only.
• We retain your data only as long as you have CreditGate installed. When you uninstall, Shopify issues a data-erasure request (typically ~48 hours later) and CreditGate permanently deletes every record for your store — always within 30 days of uninstall.
• The store owner's email, admin language and development-store flag are deleted when Shopify sends that shop data erasure request, about 48 hours after uninstall.
• Support messages are deleted together with your store data when Shopify sends its store-deletion (shop/redact) request, or sooner on request. Backup copies of support messages age out within 30 days.
• Sales-rep portal credentials are stored securely and can be revoked by removing the rep within the App.

5. Your Rights

You have the right to:

• Access: Request a copy of the data we hold about your store.
• Deletion: Request deletion of your data at any time. Uninstalling the app triggers automatic deletion within 30 days.
• Correction: Request correction of inaccurate data.
• Portability: Request your data in a portable format.

Wholesale buyers (your applicants and account contacts): CreditGate honors Shopify's GDPR webhooks end-to-end. When a buyer asks your store what data is held on them, CreditGate compiles a complete report of their application, account, and order-decision records for you to pass on. When a buyer requests erasure, CreditGate permanently strips their identifying information (name, email, phone, business identifiers, document links, PO numbers) while retaining only the non-identifying financial skeleton your books need (credit limit, exposure, decision history).

6. Cookies and Tracking

CreditGate does not use cookies for advertising or tracking purposes. We use only essential session cookies required for the app and the sales-rep portal to function.

7. Children's Privacy

CreditGate is a business tool for Shopify merchants. We do not knowingly collect information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting an update within the app or by email.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

NerdLabs
Email: support@nerdlabs.us
Website: nerdlabs.us