Privacy Policy

1. Who we are

Retail Force is a DBA of SlashCart Inc., a corporation registered in the State of Delaware, United States, with its address at 131 Continental Drive, Suite 305, Newark, DE 19713, United States.

We build and publish applications for Shopify merchants. In this policy, “Retail Force”, “we”, “us” and “our” refer to SlashCart Inc. trading as Retail Force; “you” refers to the person or business using our website or apps.

For merchant and website data described here, we act as a data controller. For personal data belonging to a merchant’s own customers or staff that our apps process on that merchant’s behalf, we act as a data processor and the merchant is the controller.

2. Who this policy covers

This policy applies to:

• Visitors to retailforce.agency
• Shopify merchants who install any Retail Force app
• People who contact us for support, sales or partnership enquiries

It does not apply to Shopify’s own processing of your data, or to third-party websites we link to. Shopify’s handling of merchant and buyer data is governed by Shopify’s privacy policy.

3. Information we collect

Information you give us

• Account and store details — store name, myshopify domain, contact email, country and timezone, received from Shopify when you install an app.
• Support communications — the content of emails, chat messages, and any screenshots or files you send us.
• Enquiry details — name, email, company and message when you submit a form or book a call.

Information we receive from Shopify

When you install an app, you grant it specific access scopes. We receive only the data covered by those scopes, and only for as long as the app is installed. Section 4 lists what each app accesses.

Information collected automatically

• Usage data — which app features are used, actions taken, and error events, used to diagnose problems and improve the product.
• Technical data — IP address, browser type, device type, operating system, and referring page.
• Cookies — see section 13.

4. What each app accesses

Each app requests the minimum Shopify API scopes it needs to function. Nothing outside these scopes is accessible to us.

5. How we use information

We use personal information only to:

• Provide, operate and maintain the apps you have installed
• Perform the specific actions you ask an app to perform, such as generating labels, applying an order edit, or recording a shift
• Respond to support requests and communicate about service issues
• Diagnose faults, monitor reliability and improve our products
• Detect and prevent fraud, abuse and security incidents
• Meet legal, tax and regulatory obligations

We do not sell or share personal information for cross-context behavioural advertising. We do not use merchant store data, buyer data or staff data to train machine-learning models.

6. Legal bases for processing

Where the EU or UK GDPR applies, we rely on the following legal bases:

7. Staff and employee data

RetailForce: POS Time Clock In processes information about a merchant’s employees, including identity, hours worked, shift patterns, task completion and time-off requests. This is employment data and in many jurisdictions is subject to additional protection.

8. Sharing and service providers

We share personal information only with:

• Shopify Inc. — the platform our apps run on and through which they are distributed and billed
• Infrastructure and hosting providers — who store and process data on our behalf under contract
• Support and communication tools — used to receive and answer your messages
• Professional advisers — lawyers, accountants and auditors, where necessary
• Authorities — where we are legally required to disclose, or to establish or defend legal claims

All service providers are bound by contract to process data only on our instructions and to apply appropriate safeguards. We may also transfer data as part of a merger, acquisition or sale of assets, in which case we will notify affected merchants.

9. International transfers

SlashCart Inc. is established in the United States, and our service providers may process data in other countries. If you are located in the European Economic Area, the United Kingdom or Switzerland, your personal data will be transferred to and processed in the United States.

The United States is not the subject of a general adequacy decision. For transfers of personal data out of the EEA, the UK or Switzerland, we rely on the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable), together with supplementary technical and organisational measures. A copy of the clauses we use is available on request.

10. How long we keep data

11. Security

We apply technical and organisational measures appropriate to the risk, including encryption of data in transit, access controls limiting staff access to what their role requires, credential rotation, logging, and regular review of our dependencies. Our apps meet the security requirements Shopify enforces for App Store distribution.

No system is completely secure. If a breach affects your personal information and creates a risk of harm, we will notify you and the relevant authorities as required by applicable law.

12. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct information that is inaccurate or incomplete
• Delete your information, subject to legal retention requirements
• Object to or restrict certain processing
• Receive your data in a portable, machine-readable format
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with a supervisory authority
• Not be discriminated against for exercising any of these rights

To exercise any of these, email support@retailforce.io. We respond within 30 days, or within 45 days where US state privacy law allows an extension. We may need to verify your identity first.

If you are a buyer or an employee of a merchant using our apps, please direct your request to that merchant, who is the controller of your data. If you contact us directly, we will forward your request to them.

If you are in the EEA or the UK, you may complain to your local data protection authority. If you are a California resident, you may have additional rights under the CCPA as amended, including the right to know what personal information is collected and the right to opt out of sale or sharing — note that we do not sell or share personal information as those terms are defined.

13. Cookies and analytics

Our website uses cookies to keep the site working, remember your preferences, and understand how the site is used so we can improve it. You can block or delete cookies through your browser settings; if you do, parts of the site may not work as intended.

Our apps use only the cookies and session storage required to operate inside the Shopify admin. They do not place advertising or cross-site tracking cookies on merchant storefronts.

14. Children

Our website and apps are business tools and are not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

15. Changes to this policy

We may update this policy as our products, our service providers or the law change. The “Last updated” date at the top always reflects the current version. If we make a material change affecting how we use your personal information, we will give notice by email or through the app before it takes effect.

16. Contact us