1. Who this covers
This policy explains how Paydan Inc, operating Shopfin ("Shopfin", "we"), handles personal information when you use the Shopfin websites, apps and the Chloe assistant (the "Platform"), whether you run a business, work for one, are a payment partner, or shop. It is part of our Terms of Service.
When a business uses Shopfin to keep its customers' information (for example sales, orders, bookings, work orders and invoices), the business decides how that information is used; Shopfin processes it on the business's behalf. Questions about how a business uses your information should go to that business.
2. What we collect
- Account information: name, email address, password (stored only as a secure hash), sign-in security settings, and the businesses and roles you belong to.
- Business information: business name, address, phone, hours, tax settings, listing details, photos, products, prices and settings.
- Customer and transaction information that businesses keep with us: customers' names and contact details, sales, online orders, shipping addresses, bookings, work orders (including signatures), invoices and reviews.
- Payment information: card numbers are entered into secure fields provided by the business's payment processor and are never received or stored by Shopfin. We keep the result of a payment (amount, status, the last four digits and card type) to show receipts and refunds.
- Chloe conversations: the questions you ask Chloe and her answers, with your account and when. Kept for one year, then deleted.
- Text-message consent: the phone numbers that agreed to get texts, and where they agreed.
- Technical information: IP address, browser and device type, and records of important actions (an audit log) for security and to resolve disputes. We use only the cookies needed to sign you in, keep you secure and remember choices (such as your cart); we do not use advertising cookies.
3. How we use it
- To provide the Platform: accounts, selling, online stores, bookings, payments, the directory and Chloe.
- To send emails and, where you agreed, texts about your account, orders and bookings.
- To keep the Platform safe: preventing fraud, card testing, abuse and attempts to misuse Chloe.
- To support you, and to improve and fix the Platform.
- To meet legal obligations and enforce our Terms.
We do not sell personal information, and we do not use it for third-party advertising.
4. Who we share it with
- The businesses you deal with: when you order, book or review, the business receives what it needs to serve you (for example your name, contact details and order).
- Payment partners: a business's payment processor and partner (ISO) receive what is needed to set up and run its card payments.
- Service providers who work for us under contract: cloud hosting and storage, email delivery, text messaging, AI processing for Chloe, and automated screening of photos for harmful content. They may use the information only to provide their service to us.
- The public: directory listings, business photos and published reviews (with the reviewer's name, never their email) are public.
- Legal reasons: when required by law, to protect people's safety, or to defend our rights; and to a successor if Shopfin is merged or sold.
5. How long we keep it
We keep account and business records while the account is open and as long as needed for the purposes above, for legal, tax and accounting obligations, and to resolve disputes. Records are switched off rather than erased where the history matters (for example sales and the audit log). Chloe conversations are deleted after one year.
6. Security
We protect information with encryption in transit, separation of each business's data, encrypted storage of payment keys, two-step sign-in and an audit log. No system is perfectly secure; tell us right away at [email protected] if you think your account has been compromised.
7. Your choices and rights
- You can see and change your account details in your account settings.
- You can stop texts at any time by replying STOP.
- Depending on where you live (for example California), you may have the right to know, access, correct or delete your personal information, and to not be treated differently for using these rights. Write to [email protected]; we will verify your request and answer within the time the law requires. For information a business keeps about its customers, we will pass your request to that business.
8. Children
The Platform is not for children under 13, and accounts are for people 18 or older. We do not knowingly collect information from children.
9. Changes and contact
We may update this policy; the date at the top shows the latest version, and we will tell account holders about significant changes. Questions: [email protected] · Paydan Inc, [company address].