Privacy policy

B2B Autopilot: Tiers & Terms · Last updated: 3 October 2026

This policy explains what data the B2B Autopilot app ("the app"), published by Nudge4 ("we", "us"), handles when a merchant installs it on a Shopify store.

Data the app reads from Shopify

With the permissions the merchant approves at installation, the app reads:

• B2B companies and company locations: names, creation dates, the country code of the location's address, and one company field (metafield) the merchant chooses for matching
• B2B markets and which company locations belong to them
• the store's payment terms templates and its company metafield definitions

The app does not request or store any customer personal data: no customer or contact names, email addresses, phone numbers or street addresses. It does not read orders.

What the app changes in Shopify

Only what the merchant configures: it adds or removes company locations in the merchant's B2B markets, creates a B2B market when asked, and sets a location's payment terms, draft-order review setting and tax exemption.

Data the app stores

• The store's domain and the access token Shopify issues to the app (needed to call Shopify's API).
• The merchant's settings and tiers (tier names, linked market IDs, matching values, chosen defaults).
• An activity log of tier changes: Shopify company location ID, tier names, source and time, kept for 90 days. Names are looked up live from Shopify when shown, not stored.
• Basic usage events without personal data (for example "tier created").

How data is used

Only to provide the app's features. We don't sell data, use it for advertising, or share it with third parties, except the service providers below.

Where data is processed

• Shopify: the source of all store data.
• Render (Render Services, Inc.): hosts the app server and its PostgreSQL database in the United States. All connections use HTTPS/TLS.

Retention and deletion

• When the app is uninstalled, all data stored for the store is deleted immediately. Shopify's shop/redact request is also honoured.
• customers/data_request and customers/redact: the app stores no customer data, so there is nothing to return or erase.

Security

Access to the hosting account and database is limited to the developer and protected with strong passwords and two-factor authentication. Secrets are kept in the host's encrypted environment settings, never in source code. The app requests only the Shopify permissions its features need.

Your rights

Merchants can request access to or deletion of their store's data by emailing us.

Changes

We'll update this page if the app's data handling changes, and change the date above.

Contact

Nudge4 · Email: nudge4.support@gmail.com · Support page