Privacy Policy
Wholesale Lock by Tiwaa • Last updated June 22, 2026
This Privacy Policy explains what information the Wholesale Lock by Tiwaa app (“the App”, “we”, “us”) collects from Shopify merchants who install it, how that information is used, and the choices you have. By installing or using the App, you agree to this policy.
Information we collect
When you install the App on your Shopify store, we access and store only what is needed to provide the service:
- Store information — your store’s myshopify.com domain, the install date, and your selected plan.
- App configuration — your wholesale lock settings (what to hide, the target audience, allowed customer tags, the lock message, login link, and styling).
- Quote-request submissions — when a locked-out visitor submits the optional “Request a Quote” form, the name, email, company, and message they provide are stored on your shop record so you can review them in the App and export them.
- Session & authentication tokens — issued by Shopify so the App can securely connect to your store.
Apart from quote-request submissions, the App does not collect or process the personal data of your customers (such as addresses or payment details). The wholesale lock is rendered on the storefront by a lightweight public script that reads only your lock settings; it hides pricing and the Add to cart button from shoppers who are not authorized to see them.
How we use information
- To apply the wholesale lock you configure — hiding pricing and the Add to cart button from guests (and customers without an allowed tag).
- To save and load your lock settings inside the App.
- To receive, display, and let you export the quote requests shoppers submit through the optional form.
- To operate billing through Shopify’s Billing API and apply your plan.
- To provide support and to maintain, secure, and improve the App.
How information is stored
Data is hosted on Cloudflare infrastructure (Cloudflare Pages, Workers, and KV) and on our application backend. Information is transmitted over encrypted HTTPS connections. We retain your configuration and any stored quote requests for as long as the App is installed.
Sharing of information
We do not sell or rent your information. We share data only with infrastructure providers that are necessary to run the App (Shopify and Cloudflare), and only as required to deliver the service or to comply with the law.
Data retention and deletion
When you uninstall the App, the related authentication tokens are revoked by Shopify. You may request deletion of the configuration data associated with your store at any time by emailing us at tiwaaofficial@gmail.com. We also honour Shopify’s mandatory data-erasure and data-request (GDPR) webhooks.
Your rights
Depending on your location, you may have the right to access, correct, or delete the information we hold about your store. To exercise these rights, contact us at the email below.
Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by the “Last updated” date at the top of this page.
Contact us
If you have any questions about this Privacy Policy or your data, contact us at tiwaaofficial@gmail.com.