Privacy.
A plain-English summary of what we collect, why, and what you can do about it. The controlling document lives alongside our Terms — request the long version at legal@primalti.com.
What we collect
- Merchant contact info you give us through the "Apply for sandbox" form: name, email, company, optional phone / messaging handle, rough monthly volume, and your selected time slot.
- Buyer data from end customers checking out through a Primalti-powered checkout — name, billing and shipping address, email, order details, and tokenized payment information. We collect this because Primalti is the seller on the buyer's invoice and the line of record on their bank statement.
- Merchant data you connect when you install the Shopify app or the WooCommerce plugin: store catalog, orders, payouts, and bank-settlement details — only what the checkout needs to run and what we need to remit your net.
- Technical data from visitors to primalti.com: IP address, user-agent, referrer, approximate location, and basic analytics events.
Why we collect it
- To respond to your inquiry or schedule a call.
- To run the checkout on your behalf — invoicing the buyer, collecting the right tax, screening for fraud, and remitting the net of your sales to your bank.
- To meet our own tax, accounting and anti-fraud obligations on the orders we invoice.
- To keep the product reliable: debugging, abuse prevention, product analytics.
- To comply with our legal obligations (record-keeping, lawful requests).
Who we share it with
We share data only with the subprocessors strictly needed to run the service — cloud infrastructure, payment processing, tax calculation and filing, fraud screening, email delivery, analytics and error monitoring. We don't sell personal data, ever. A current list of subprocessors is available on request.
Retention
Inquiry data is kept for 24 months after the last interaction. Buyer order and invoice data is retained for the period required by tax and accounting law in each jurisdiction we cover (typically 7–10 years). Merchant connection data is retained for as long as your account is active and for the period required by applicable law after termination.
Your rights
Depending on where you live, you can request access, correction, deletion, or export of your personal data. Requests for deletion may be limited where we are legally required to keep records (typically tax and accounting). Email privacy@primalti.com and we'll action what we can within 30 days.