Clear terms. A shared understanding.

1. Your agreement with Tradefold

Tradefold is provided by Dynamic Online Technologies (SMC-PVT) LTD., Pakistan, trading as The Dot Dev. Our correspondence address is 335 Street 23, Ghaznavi Block, Bahria Town, Lahore 54000, Pakistan. Contact hello@tradefold.app for support, privacy requests or questions about these terms.

By accepting, you confirm that you are authorized to act for the merchant that operates the connected Shopify store. These terms cover that store's use of Tradefold. You retain your rights in your information and authorize us to process it to provide, secure and support the service.

2. Review before taking action

Tradefold imports purchase orders, extracts details, matches products and case quantities, and prepares Shopify draft orders and pro-forma documents. You must review the buyer, products, quantities, case multipliers, prices, currency, shipping, taxes and payment terms before approving an action. AI output can be incomplete or incorrect.

A pro forma does not confirm payment, fulfill an order, issue a credit note or establish that a document meets local tax-invoice requirements. You remain responsible for your sales, tax treatment and communications to buyers. Do not upload payment-card credentials, passwords or unrelated sensitive records.

3. Subscription and cancellation

Shopify displays the price, billing cycle and trial terms before you approve a subscription. Those approved terms govern your charges. Trial use is limited to 14 days and 10 successful draft orders; reaching the allowance does not itself authorize an early charge. Reinstallation and plan changes do not reset used trial drafts.

You can uninstall through Shopify to end app access and cancel the subscription. Refund requests can be sent to hello@tradefold.app for review; no automatic refund or proration is promised. This does not limit rights or remedies that applicable law requires. Source-processing and storage limits are separate from draft-order allowances and are shown in the app.

4. Processing on your instructions

For personal data you provide about customers and prospective customers, you determine the purpose of processing and we act as your processor or service provider as applicable. Processing includes collecting, storing, extracting, matching, displaying, transmitting and deleting information as needed for your approved order workflow. The data may include buyer names, addresses and contact details, purchase-order files, order lines, customer references, notes, messages and approval records.

We process that data only on your documented instructions, including authorized use of Tradefold and verified support requests, unless applicable law requires otherwise. We will inform you if we believe an instruction infringes applicable data-protection law, and of a legally required disclosure unless prohibited. You are responsible for lawful collection and any required notices or consent. We do not sell this data, use it for targeted advertising or use it to train our own general-purpose models.

5. Service providers and international processing

You authorize Hostinger for application, database and backup hosting, OpenAI for requested AI extraction, and Resend for the order inbox and merchant-approved messages. Shopify provides authentication, store APIs and app billing under your Shopify arrangements. We remain responsible for our processing obligations when using subprocessors and require contractual data-protection obligations appropriate to their work.

Tradefold's production OpenAI project is excluded from voluntary data sharing and extraction requests disable response storage. Provider security and abuse-monitoring retention can still apply. This is not a zero-retention service. Data may be processed outside your country; we do not promise a country-specific storage region. Where legally required, transfers must be covered by an applicable lawful safeguard before the affected processing occurs.

We will give affected merchants at least 30 days' notice before adding or replacing a subprocessor that handles their personal data. You may object on reasonable data-protection grounds by contacting support. If we cannot resolve the objection, you may stop the affected processing and end the service.

6. Security and assistance

We restrict access to authorized people who need it to operate or support the service and require confidentiality. Controls include Shopify-authenticated store isolation, signed webhooks, encrypted transport, access logging and encrypted application backups. We will notify you without undue delay after becoming aware of a personal-data breach affecting your data and share available information needed for your response.

We will provide reasonable assistance with verified individual-rights requests, security incidents, required impact assessments and regulator inquiries relating to our processing. On reasonable request, we will provide information needed to demonstrate these obligations and cooperate with proportionate audits, protecting other merchants' data and service security. Support is handled through hello@tradefold.app; these terms do not promise 24-hour staffing or a fixed response time.

7. Retention, return and deletion

Active workspace records are used for order review, reconciliation and history. Original files and extracted source text are scheduled for retirement after an order has remained archived and unchanged for 90 days. Active processing, unresolved messages and privacy or security holds defer that action until safe to proceed. Retirement preserves order records, draft links and generated documents; it is not deletion of the whole order. Contact support to request a verified export or wider deletion.

On termination, you may request return or deletion of personal data processed on your behalf. We will carry out the verified request and address provider-held copies, except where applicable law requires retention. Retained exceptions will be identified and restricted to the purpose requiring retention. Backup copies are protected from ordinary use and expire on the applicable backup schedule; restoration must reapply relevant deletion decisions.

Application database backups use a 14-day window, managed operator privacy exports expire after 7 days, and access logs use a 30-day window subject to active privacy or security holds. Provider-held emails, hosting backups and other provider records have separate schedules. Their handling and any unresolved copies will be disclosed when responding to a deletion request; deleting an app record is not proof that all provider copies were erased.

8. Changes and service availability

We may maintain, change or suspend the service to address security, abuse, legal obligations or technical failures. We will give reasonable notice when practicable and explain material changes. New material terms require acceptance of a new version before continued use; previous versions and acceptance records remain identifiable.

The service is provided with reasonable care, but uninterrupted availability or error-free extraction is not guaranteed. Neither party excludes liability that cannot lawfully be excluded. These terms do not change your statutory rights. Contact support first to seek resolution of a dispute.