GateForge - Merchant Terms & Data Processing

Last updated: July 16, 2026

These terms apply between you (the merchant installing GateForge) and the operator of GateForge. By installing or using the app you accept them. If you do not accept them, uninstall the app.

1. What the app does

GateForge collects wholesale account applications from your prospective buyers through a public form and, on your approval, creates the corresponding B2B Company, Company Location, and Company Contact in your Shopify store. Billing, if any, is handled entirely through Shopify’s billing system.

2. Roles

For personal data submitted by your applicants, you are the data controller and GateForge is your data processor. We process applicant data only on your behalf and only for the purpose above.

3. Data processing commitments

• Scope: we process only what applicants submit - company name, contact name, business email, business address, and optional phone, website, tax ID, and message.
• Purpose limitation: applicant data is used solely to present applications to you and create B2B records on your approval. No marketing, profiling, enrichment, sale, or sharing.
• Retention: decided applications are deleted after 90 days; all of your data (applications, settings, sessions) is deleted within 48 hours of uninstall via Shopify’s shop/redact webhook.
• Data subject requests: Shopify’s customers/data_request and customers/redact webhooks are implemented: deletion requests remove applicant records outright.
• Security: TLS on all traffic; storage on an encrypted volume with encrypted backups; no personal data in logs; credentials held as platform secrets; access limited to the operator.
• Sub-processors: Fly.io (hosting, Canada) and Shopify. We will update the privacy policy before adding any other.
• Breach notification: if we become aware of a personal data breach affecting your data, we will notify you at your configured notification email (or your store’s contact email) without undue delay and no later than 72 hours after becoming aware.

4. Your responsibilities

• Ensure you have a lawful basis to collect applicant data through the form, and that your own store policies cover wholesale applications.
• Review applications and approvals - the app never approves or rejects anyone without configuration you control.

5. Service, liability, changes

The app is provided as-is, without warranty of uninterrupted operation. To the maximum extent permitted by law, liability is limited to the fees you paid for the app in the three months before the claim. We may update these terms; material changes will be reflected in the date above, and continued use after a change is acceptance.

Contact

navkhan103@gmail.com · See also the privacy policy.