Privacy Policy

Last updated: June 3, 2026

This Privacy Policy describes how NerdLabs ("we," "us," or "our") collects, uses, and protects information through the CreditGate application ("the App"). CreditGate is a Shopify application that provides wholesale account approvals, credit-limit management, purchase-order enforcement, and sales-rep ordering for B2B merchants.

1. Information We Collect

1.1 Shopify Store Data

When you install CreditGate, we access the following data from your Shopify store through Shopify's API:

• Company and B2B account data (company names, locations, contacts, payment terms)
• Customer information associated with wholesale accounts
• Order and draft-order data (amounts, line items, purchase-order numbers, status)
• Store profile information (store name, email, currency)

1.2 Wholesale Account & Credit Data

To provide the App's core functionality, we store data that you and your wholesale applicants provide, including:

• Wholesale application details (business name, contact details, trade references, business type)
• Credit limits and the live exposure CreditGate calculates from open orders
• Purchase-order numbers and PO records
• Approval, rejection, and order-decision history

1.3 Sales-Rep Information

• Rep names, email addresses, and login credentials for the rep ordering portal
• The accounts each rep is assigned to and the orders they place

1.4 Uploaded Documents

2. How We Use Your Information

We use the collected data exclusively to:

• Process wholesale account applications and create approved B2B accounts in Shopify
• Enforce the credit limits and PO rules that you define
• Calculate live credit exposure and hold or flag over-limit orders
• Power the sales-rep ordering portal and route orders for approval
• Maintain a full audit log of approvals, limit changes, and order decisions
• Send you notifications about applications, holds, and account activity (if enabled)
• Improve and maintain the App

3. Data Sharing and Disclosure

We do not sell, rent, or share your data with third parties for their marketing purposes. Your data may be shared only in the following circumstances:

• Service Providers: We use infrastructure providers (hosting, databases, file storage) that process data on our behalf under strict data processing agreements.
• Legal Requirements: We may disclose data if required by law, subpoena, or court order.
• Business Transfers: In the event of a merger or acquisition, data may be transferred as part of business assets.

4. Data Storage and Security

• Data is stored on secure servers with encryption at rest and in transit (TLS 1.2+).
• Uploaded certificates and documents are stored in access-controlled file storage.
• Access to production systems is restricted to authorized personnel only.
• We retain your data only as long as you have CreditGate installed. Upon uninstallation, your data is deleted within 30 days.
• Sales-rep portal credentials are stored securely and can be revoked by removing the rep within the App.

5. Your Rights

You have the right to:

• Access: Request a copy of the data we hold about your store.
• Deletion: Request deletion of your data at any time. Uninstalling the app triggers automatic deletion within 30 days.
• Correction: Request correction of inaccurate data.
• Portability: Request your data in a portable format.

6. Cookies and Tracking

CreditGate does not use cookies for advertising or tracking purposes. We use only essential session cookies required for the app and the sales-rep portal to function.

7. Children's Privacy

CreditGate is a business tool for Shopify merchants. We do not knowingly collect information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting an update within the app or by email.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at:

NerdLabs
Email: support@nerdlabs.us
Website: nerdlabs.us