Privacy Policy

This Privacy Policy describes how FireBar Labs ("we", "us", or "our") collects, uses, and shares personal information when a merchant installs or uses the Drop Circle Shopify application (the "App") on their Shopify store.

1. Information We Collect

When a merchant installs the App, we receive the following information from Shopify through the Shopify OAuth flow and Admin API:

• Shop information: shop name, shop domain, primary email, country, currency, timezone, and shop owner contact details.
• Product data: product titles, descriptions, variants, images, SKUs, pricing, and inventory quantities.
• Order data: order numbers, line items, fulfillment statuses, shipping addresses (for routing to suppliers), and tracking numbers.
• Customer data: only the subset of customer information required to fulfill an order — name, shipping address, and contact method for delivery updates. We do not collect payment card data, browsing history, or marketing consent data.

2. How We Use Your Information

We use the information we collect to operate the Drop Circle service. Specifically:

• To synchronize products between approved suppliers and approved retailers.
• To route orders from retailer stores to the corresponding supplier for direct fulfillment.
• To propagate fulfillment and tracking information back to the retailer and end customer.
• To keep inventory levels consistent across participating stores.
• To provide customer support, respond to inquiries, and troubleshoot issues.
• To comply with legal obligations and enforce our Terms of Service.

3. How We Share Your Information

Drop Circle is a closed, curated network. Information is shared strictly on a need-to-know basis within the network:

• Between retailers and suppliers: when a retailer sells a product sourced from a supplier through Drop Circle, we share the relevant order details (including the end customer's shipping address) with that supplier so they can fulfill the order.
• Service providers: we use infrastructure providers (Hostinger for hosting, Shopify for the underlying commerce platform) that process information on our behalf under contractual confidentiality obligations.
• Legal compliance: we may disclose information when required by law, subpoena, or other valid legal process, or when necessary to protect our rights or the safety of others.

We do not sell personal information to third parties, and we do not use it for targeted advertising.

4. Data Retention

We retain shop, product, and order data for as long as the App is installed on a merchant's store. When the App is uninstalled, we retain records for an additional 90 days for dispute resolution and fulfillment reconciliation, after which the data is permanently deleted. Merchants may request earlier deletion by contacting us at wholesale@firebarlabs.com.

5. Your Rights (GDPR, CCPA, and Similar Laws)

Depending on your location, you may have rights to access, correct, delete, or port your personal information, and to restrict or object to certain processing. To exercise these rights, contact wholesale@firebarlabs.com. We will respond within 30 days.

Shopify merchants who have installed the App can also trigger a data request through their Shopify admin; Shopify sends us a compliance webhook, and we will respond in accordance with applicable law.

6. Security

We protect information in transit using TLS 1.3 and at rest using industry-standard encryption. Access to production systems is limited to authorized personnel and protected by SSH key authentication. All Shopify webhooks are verified using HMAC-SHA256 signatures before processing.

7. International Data Transfers

FireBar Labs is based in the United States. If you access the App from outside the United States, your information will be transferred to, stored, and processed in the United States. By installing the App, you consent to this transfer.

8. Children's Privacy

The App is intended for use by businesses, not individuals, and specifically not by children under the age of 18. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top and, for material changes, notify installed merchants by email.

10. Contact

For questions about this Privacy Policy or our data practices:

FireBar Labs
8117 W. Manchester Ave #420, Playa del Rey, CA 90293, USA
Email: wholesale@firebarlabs.com