Privacy Policy

This Privacy Policy describes how VaultWallet ("we", "our", or "us"), developed and operated by KASWEBTECH SOLUTIONS PRIVATE LIMITED, collects, uses, and protects information when you install and use the VaultWallet Shopify application (the "App").

By installing the App, you agree to the collection and use of information in accordance with this policy. This policy applies to Shopify merchants who install the App ("Merchants") and to customers of those merchants who interact with wallet and refund features ("Customers").

We collect only the information necessary to operate the VaultWallet service:

Merchant Information

• Shopify shop domain and Shop ID

• Shopify access token (stored securely, used solely to make API calls on your behalf)

• Active subscription plan (Basic or Pro)

Customer Information (accessed via Shopify Admin API)

• Customer ID, display name, and email address — used to display customer details in the merchant dashboard

• Order IDs, order names, and order totals — associated with refund requests submitted through your store

Wallet & Transaction Data

• Customer wallet balances

• Transaction records (credits and debits) including amounts, timestamps, order references, and completion status

• Refund request details: reason submitted, requested amount, approval status, and approval date

We use the information we collect solely to provide the VaultWallet service:

• To manage and display customer wallet balances and transaction history in your merchant dashboard

• To process refund requests — reviewing, approving, or rejecting them from the dashboard

• To create official Shopify refunds via the Shopify Refund API when a refund request is approved

• To issue wallet credits to customers as Shopify discount codes redeemable on future orders

• To process loyalty credit payments via PayPal (Pro Plan merchants only)

• To manage your App subscription and billing via Shopify Billing API

• To maintain app security, troubleshoot issues, and provide support

We do not use your data for advertising. We do not sell, rent, or share your data with third parties beyond what is described in this policy.

All data collected by VaultWallet is stored on secure servers operated by KASWEBTECH SOLUTIONS PRIVATE LIMITED:

• Data is stored in a secured MySQL database with restricted, role-based access

• Shopify access tokens are stored securely and are never exposed to the client

• All data in transit is encrypted using HTTPS/TLS

• Access to production systems is limited to authorized personnel only

While we implement industry-standard security measures, no system is 100% immune to risk. We encourage merchants to report any security concerns to us immediately.

VaultWallet integrates with the following third-party services to deliver its features:

Shopify

VaultWallet operates as a Shopify embedded app. Installing the App grants us access to your store data based on the API scopes you approve. This includes read access to customers and orders, and write access to create refunds and discount codes. Your use of Shopify is governed by Shopify's own Privacy Policy and Terms of Service.

PayPal (Pro Plan only)

Merchants on the Pro Plan can fund loyalty credits for customers via PayPal. Payments are processed entirely through PayPal's platform — we do not store PayPal credentials or card details. PayPal's use of your data is governed by PayPal's Privacy Policy.

We are not responsible for the privacy practices of Shopify, PayPal, or any other third-party platform.

We retain your data only as long as your App subscription is active:

• **Plan cancellation**: When you cancel your subscription, all customer wallets, transaction records, and refund requests for your shop are permanently deleted from our database.

• **App uninstall**: When you uninstall VaultWallet from Shopify, all shop data — wallets, transactions, refund requests, and sessions — is permanently deleted within 48 hours.

VaultWallet is fully compliant with Shopify's mandatory GDPR webhooks:

• **shop/redact** — triggered ~48 hours after uninstall; permanently deletes all shop data

• **customers/redact** — handles individual customer data deletion requests

• **customers/data_request** — handles customer data access requests

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights regarding your personal data:

• **Right to Access** — Request a copy of the data we hold about you

• **Right to Rectification** — Request correction of inaccurate or incomplete data

• **Right to Erasure** — Request permanent deletion of your data (uninstalling the App triggers automatic deletion)

• **Right to Restriction** — Request that we limit how we process your data

• **Right to Object** — Object to specific uses of your personal data

To exercise any of these rights, contact us at apps.kaswebtech@gmail.com. We will respond within 30 days.

If you have any questions, concerns, or requests about this Privacy Policy or how VaultWallet handles your data, please reach out:

KASWEBTECH SOLUTIONS PRIVATE LIMITED

Email: apps.kaswebtech@gmail.com

App: https://vaultwallet.kaswebtechsolutions.com

We take privacy seriously and will respond to all inquiries promptly.