Privacy, in plain language.

Optional website analytics

With your permission, our public homepage uses Google Analytics to measure visits and actions such as clicking an installation link or trying the sample walkthrough. Analytics is off until you choose Allow analytics. Choose Analytics preferences on the homepage to change your choice. Declining does not affect the website.

Google receives browser and device information, a cookie identifier, and these website events. We do not send enquiry text, email addresses, purchase orders, Shopify workspace activity, or URL query strings. Advertising signals and personalised advertising are disabled. Google processes connection information, including your IP address, to provide the service. See Google's privacy policy.

Shopify App Store listing analytics

We use a separate Google Analytics property to understand how people discover our App Store listing and move from a listing visit to clicking Install and completing installation. Shopify provides the listing events and acquisition information. These reports are separate from activity inside your Tradefold workspace.

When completed-install tracking is enabled, Shopify sends Google an installation event with the app identifier, store ID, store name and store URL. Listing analytics may also include browser, device, cookie and referral information collected on the App Store. Your choices on Shopify are governed by Shopify's privacy policy; our homepage analytics preference applies only to our website.

We do not send uploaded purchase orders, buyer messages, order contents or payment-card details through this listing integration. Google signals, user-provided data collection and ads personalisation are disabled for this property. See Google's privacy policy. Contact hello@tradefold.app about your store's analytics information.

What we receive

Tradefold is operated by Dynamic Online Technologies (SMC-PVT) LTD., Pakistan, trading as The Dot Dev. Merchants use it to review wholesale purchase orders and prepare Shopify drafts. The merchant decides which orders and buyer information to provide.

• Shopify information: store identifiers, authenticated session information, product variants, SKUs, prices, linked customer identifiers, draft billing and shipping addresses, draft totals, and app subscription status. Shopify session credentials are stored on the server to maintain the connection.
• Order information: uploaded or pasted purchase orders, emails sent to the assigned order inbox, attachments, sender details, buyer names and contact information, customer references, order lines, quantities, prices, notes, matching rules, and merchant-entered buyer price agreements and expiry dates. Workbook imports retain the original file and the merchant's selected sheet and columns. Pro-forma exports retain the merchant letterhead, including a processed logo when supplied, addresses, a snapshot of the Shopify draft and the generated PDF. Logo uploads are resized and re-encoded without their original image metadata; the original uploaded logo file is not saved in the application database. Document workspaces also store your current design, typed design messages (the latest 40) and up to 10 recent layouts with their purchase order. These records are included in applicable access and deletion workflows.
• Operational records: processing status, errors, review activity, draft identifiers, usage counters, the authenticated Shopify user ID that approved a pro-forma export, merchant-approved buyer messages (recipient, reply address, subject, full text and delivery status), privacy requests, and hosting logs. Support correspondence contains information you choose to send us.

Tradefold does not install a storefront visitor-tracking pixel. It does not collect customer payment-card details. Shopify handles app subscription billing.

Why we use it

We use this information to import and extract order details, match products, display source documents for review, maintain buyer rules, prepare merchant-approved drafts and downloadable pro-forma documents, send explicitly approved purchase-order clarifications, run the service, prevent misuse, and answer support and privacy requests.

AI-extracted details can be wrong and require merchant review. Extraction does not by itself place an order, send an invoice, collect payment, or fulfill goods. We do not sell order data or use it for targeted advertising.

Who processes information

• Shopify provides installation, authentication, catalog and draft-order APIs, and app billing.
• Amazon Web Services (AWS Bedrock) processes the document text or PDF supplied for AI extraction using Amazon Nova. AWS does not use these inputs or outputs to train its underlying models. We use a US inference profile that can process requests in Northern Virginia, Ohio or Oregon. Before each request, Tradefold verifies that account data retention is set to None, model invocation logging is disabled in all three regions, and the approved model and regional routing are unchanged. If those checks fail, extraction stops; we do not silently send the order to another AI provider. AWS documents limited safety exceptions, including retention of images suspected of containing child sexual abuse material. See its data retention controls and abuse detection policy. AI document design receives only five preset style choices. Raw design messages, custom text, logos, buyer details, order lines and amounts are not included in design requests. Design messages are saved in Tradefold with the order; order extraction separately processes the uploaded document. These AI controls do not delete the original order and review history that Tradefold keeps to provide the service.
• Resend receives emails and attachments sent to the order inbox and sends buyer clarifications after merchant approval. Replies go to the merchant's chosen inbox, outside Tradefold. We do not enable open or click tracking for these messages. Provider copies are separate from Tradefold's imported records. See Resend's privacy policy.
• Hostinger hosts the application, database, and operational backups. See Hostinger's privacy policy.

Before the provider change on 15 October 2026, AI extraction used OpenAI with response storage disabled. Earlier requests remain subject to OpenAI's API data controls, including its normal abuse-monitoring retention of up to 30 days and documented exceptions. The provider change does not erase earlier copies.

These services may process data outside your country. Tradefold does not currently offer a guaranteed country-specific storage region. Requests concerning provider-held copies require separate review; deleting an app record does not itself delete those copies.

Retention and deletion

Order documents, extracted details, buyer rules, and audit records remain in the workspace to support order review and history until removed through a reviewed deletion request. Original files and extracted source text are scheduled for retirement after an order has remained archived and unchanged for 90 days. Active processing, unresolved messages, and privacy or security holds defer retirement until safe to proceed. Order details, draft links, duplicate-detection hashes and generated documents remain. Retirement decisions are recorded in a private ledger with encrypted off-host copies for recovery.

After an authenticated Shopify shop-deletion request has been pending for seven days, disconnected stores are eligible for scheduled removal of their app workspace, orders, buyer records, source files, generated documents and messages. Connected or reinstalled stores, processing holds and unresolved work require review first. The request remains open until provider copies and backup handling have been reconciled.

Tradefold's scheduled database-backup script uses a 14-day retention window. Manual recovery exports, hosting-provider backups, provider email copies, and operational logs have separate retention; their final production retention schedule is still being verified. We do not claim that all copies disappear immediately after deletion or uninstall.

New operator privacy review exports use a dedicated private directory and expire after seven days through scheduled cleanup. Unsafe or unregistered files are held for operator review rather than removed automatically. Copies made outside that managed directory require separate review; this does not erase workspace data or provider copies.

Protected-data access logs expire after 30 days unless an active privacy or security hold requires preservation. Your store's acceptance of the merchant terms and data processing agreement is recorded with the authenticated Shopify identity, timestamp, document version and exact document snapshot.

Shopify privacy requests are recorded with a 30-day operational deadline. Receipt of a request is not confirmation that access or deletion has been completed. Any required retained records or unresolved provider actions must be reviewed before fulfillment is recorded.

How access is controlled

Merchants sign in through Shopify. Application access is scoped to the authenticated store. Incoming provider webhooks are signature-checked, and operator review exports are written to private files outside the application directory. Operational access is limited to running and supporting the service.

Access, correction, or deletion

If you are a buyer, contact the merchant that received your order first so your identity and request can be verified. Merchants can contact hello@tradefold.app about information held by Tradefold. Depending on your location, you may have rights to access, correct, erase, or restrict processing of your information and to complain to a relevant privacy authority.

Include your store domain and the type of request. Do not email passwords, API keys, payment-card details, or full customer documents in the initial message. We will arrange an appropriate way to verify the request and handle any necessary information.

Updates and contact

We will update this notice as the service and verified data-handling practices change. The date above identifies this version.

Tradefold · The Dot Dev
hello@tradefold.app