Privacy Policy

1. Information We Collect

We collect information you provide directly:

• Account Information: Name, email address, phone number, business details
• Payment Information: Processed securely through third-party processors (Stripe and Flute). Merch Go does not store credit card numbers.
• Business Data: Product listings, inventory data, order history, customer records
• Usage Data: Pages visited, features used, device information, IP address
• Customer Data: Information provided during checkout (shipping address, contact details)

2. How We Use Your Information

• Provide and maintain Platform services
• Process transactions and send related notifications
• Improve and personalize user experience
• Send marketing communications (email and SMS) when you opt in
• Detect and prevent fraud or security threats
• Comply with legal obligations

3. SMS/Text Messaging

By opting in to SMS updates via the consent checkbox during checkout, you consent to receive recurring automated text messages from Merch Go LLC and merchants on the Merch Go platform. These messages may include:

• Order confirmations and status updates
• Delivery and shipping notifications
• Promotional offers and product announcements
• Account notifications

Consent is not a condition of any purchase. Message and data rates may apply. Message frequency varies. You can opt out at any time by replying STOP to any message. Reply HELP for assistance. Carriers are not liable for delayed or undelivered messages.

We do not sell, rent, or share your phone number or SMS consent information with third parties for their marketing purposes.

All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties.

4. Data Sharing

We share data only as necessary to provide and improve our services:

• Payment Processors: Stripe and Flute for transaction processing
• Delivery Providers: DoorDash, Grubhub, Uber Eats when merchants enable delivery
• Shipping Providers: Shippo for shipping rate calculation and label generation
• SMS Provider: Twilio for text message delivery only
• Cloud Infrastructure: Google Cloud (Firebase) for hosting and data storage
• Email Services: AWS SES for transactional emails

We do not sell, rent, or share personal information — including phone numbers — with third parties for their marketing purposes.

5. Google API Services and Google Calendar Data

Merchants may optionally connect a Google account to use the Merch Go Google Calendar integration. When a merchant chooses to connect, we access only the Google data needed to provide the calendar features the merchant requests:

• Connected Account: The primary Google Account email address, used to identify the connected account in Merch Go.
• Calendar List: Calendar names, identifiers, access roles, and basic display information, used only to let the merchant choose a calendar.
• Calendar Events: Event titles, descriptions, locations, dates, times, links, identifiers, and update timestamps from the calendar selected by the merchant.
• Merchant-Directed Changes: Merch Go creates, updates, or deletes a Google Calendar event only when the merchant performs that action in Merch Go.

We use this information only to identify the connected account, synchronize the merchant’s selected calendar, provide the Events dashboard, and display events on the merchant’s storefront when that feature is enabled. We do not use Google user data for advertising, credit decisions, or audience profiling, and we do not sell it or share it with other merchants or data brokers.

OAuth access and refresh tokens are encrypted with Google Cloud Key Management Service and are accessible only to authorized backend services. Synced event details are stored in the merchant’s access-controlled Firestore account so the dashboard and storefront can display them. Authorized Merch Go personnel do not access Google user data except when necessary to provide user-requested support, investigate security or abuse, comply with applicable law, or with the user’s affirmative permission.

A merchant can disconnect Google Calendar from the Events dashboard at any time. Disconnecting revokes Merch Go’s Google access, deletes the stored OAuth credentials and connected-account metadata, and removes synced Google event copies from Merch Go. Disconnecting does not delete the original events from Google Calendar. A merchant may also request account or data deletion by emailing privacy@merch-go.com.

Merch Go’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Learn more on our public Google Calendar integration page.

6. Data Storage and Security

Data is stored in Google Cloud Firestore with encryption at rest and in transit. Sensitive credentials are stored in encrypted sub-collections separate from public merchant data. We implement role-based access controls to limit data access.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Withdraw consent for optional data processing (including SMS)

To exercise these rights, contact privacy@merch-go.com.

8. Cookies

We use essential cookies for authentication and session management. We use analytics to understand Platform usage. You can manage cookie preferences through your browser settings.

9. Data Retention

We retain data for as long as your account is active or as needed to provide services. Order and transaction data may be retained longer for legal, tax, and compliance purposes.

10. Children's Privacy

The Platform is not intended for users under 13 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this policy periodically. Changes will be posted on this page with an updated revision date.

12. Contact Us

For privacy inquiries: privacy@merch-go.com

General inquiries: support@merch-go.com