This Privacy Policy explains how Tringify Ecommerce Private Limited, an Indian company operating the Tringify platform, handles personal information. Contact us at privacy@tringify.com or use the Privacy Centre.
1. Who handles your information
We are responsible for personal information we use to operate Tringify accounts, administer our business, communicate with you, secure our services and run our own websites.
When a merchant uses Tringify to operate a store, the merchant generally determines why its shoppers' information is processed. Tringify processes that information on the merchant's instructions to provide the platform. The merchant's Privacy Policy applies to its collection and use of shopper information. Our Data Processing Addendum explains the processing we perform for merchants.
A merchant's apps, payment providers and other independently selected services may have their own responsibilities and privacy terms. Installing an app or connecting a service can give it access to information within the permissions you approve.
2. Information we handle
Depending on how you use Tringify, information may include:
- Account information: name, email address, profile preferences, account identifiers, language and timezone.
- Business and billing information: business details, addresses, tax information, subscription choices, invoices and payment references. Payment providers handle payment credentials; Tringify does not store full payment-card details.
- Store information: customer contact and address details, orders, customer communications, account records and content submitted by merchants or shoppers.
- Security and usage information: IP addresses, device and browser information, sign-in history, sessions, actions within the service and diagnostic information.
- Communications and requests: information you provide to support, in applications or forms, or when exercising privacy rights.
- Consent and preferences: policy acceptance records, communication preferences and cookie choices.
Passkey registration supplies public-key credentials and related authenticator information. Your device handles its fingerprint, face or screen-lock verification; Tringify does not receive the fingerprint or face image used to unlock a passkey.
3. Why we use information
We use information to provide the features you request, authenticate users, manage permissions, operate stores, process billing, deliver communications, troubleshoot problems, prevent fraud and abuse, respond to requests, and meet legal obligations.
Where applicable law requires a legal basis, we rely on performance of our agreement, compliance with legal obligations, legitimate interests such as securing and operating the service, or consent where required. Optional marketing communications can be unsubscribed from. Service, security and billing messages remain separate from promotional messages.
Optional analytics on our marketing website is controlled through cookie preferences. The Privacy Centre does not load marketing analytics on its request and tracking pages. Read the Cookie Policy for details.
Content submitted to an optional AI or translation feature may be processed by the services needed to provide that feature. Submit only information you are authorised to use for that purpose. An app or independently connected provider's own terms may also apply.
4. Who receives information
We use service providers for hosting, storage, delivery, communications, payments and other functions needed to operate the service. See service providers for the relevant categories and providers.
Information may be shared with people you authorise, such as team members, collaborators and installed apps, within the applicable access. We may disclose information when required by law, to respond to a valid legal request, or where necessary to protect rights, safety or the security of the service. A merger, acquisition or business transfer may involve information relevant to that transaction, subject to appropriate safeguards.
We do not sell personal information. Optional analytics or an integration must not be taken to mean that a merchant's customer information is automatically available to unrelated merchants.
5. Apps by Tringify
Tringify publishes its own apps, such as Tringify for Google, that merchants can install in their store. An app by Tringify works only within the permissions the merchant approves when installing it, and uses information only to provide the app's features to that merchant.
Some apps connect to an account the merchant holds with another company, such as a Google account. The merchant chooses whether to connect it and can disconnect it at any time. We use what that company shares with us only for the features the merchant uses, and never to advertise to the merchant or anyone else.
Tringify for Google
When a merchant connects a Google account, Tringify for Google can:
- see the Google account's email address, to show which account is connected;
- with Google Merchant Center: list the merchant's accounts, create one if asked, keep business details current, confirm the store's website, accept Google's terms when the merchant chooses to, and send, update and remove the store's products;
- with Google Ads: list the merchant's accounts, link one to Merchant Center, set up a purchase conversion, report sales, and take back cancelled or refunded sales;
- with Google's Data Manager: report sales, and keep a Customer Match audience of the store's customers who agreed to marketing;
- with Google Site Verification: place Google's verification tag on the store, to confirm the website belongs to the merchant.
Shopper information goes to Google only as the shopper's consent allows. Email addresses and phone numbers are scrambled (hashed with SHA-256) before they leave the store. They are included with sales only when the shopper allowed sharing advertising data, and in Customer Match only when the customer agreed to marketing by that channel.
The merchant's Google access is stored encrypted and used only to carry out the actions above for that store. We do not sell this information, use it for advertising, or use it to train general-purpose AI models. People at Tringify read it only with the merchant's permission, for security, or where the law requires. Information received from Google is not shared with any other company, except the cloud providers that host Tringify's systems, which store it encrypted on our behalf. We keep it only while the app is connected to that store.
When the merchant disconnects Google in the app, we delete the stored access and ask Google to revoke it. When the merchant uninstalls the app, we delete the store's Google settings and access. A merchant can also remove access at any time at myaccount.google.com/permissions. Products and audiences already in the merchant's Google accounts stay there under the merchant's control.
Tringify's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. Security and locations
We use access controls, authenticated requests, HTTPS connections, account-protection features and operational safeguards. Backups support recovery. No service can promise that every incident will be prevented, and a recovery test is not a guarantee of a fixed recovery time. Our Security page describes the controls available to you.
Our core production databases are hosted in India. Edge delivery and service providers may process information in other countries. A visitor's selected country or currency does not determine where all of their data is stored. Where a transfer requires a legal safeguard, the applicable transfer arrangement must be in place; the location of a cloud provider or its certification alone does not establish Tringify's compliance.
7. Retention
We retain information for the purpose it serves and applicable legal requirements. Active service records, transaction and tax records, security logs, backups and privacy-request records have different retention needs. Closing an account does not automatically erase information that must be kept for law, billing, fraud prevention or a dispute.
The Privacy Centre's confirmation links and private-link sessions expire after 24 hours. Unconfirmed submissions are removed after seven days. Prepared account downloads expire after seven days. Completed privacy-request history is normally kept for two years, with documented legal preservation where needed. See data retention for details, including backups and merchant store data.
An IP address or other identifier may remain personal information even if it has been shortened or masked. We do not treat masking alone as a promise of irreversible anonymisation.
8. Your choices and requests
Depending on the law that applies, you may have rights to access, correct, receive a copy of, delete, restrict or object to the use of your personal information, withdraw consent, or raise a complaint. These rights can have conditions and exceptions, including retention required by law and the rights of other people.
Use privacy.tringify.com or email privacy@tringify.com. An account is not required. We verify identity proportionately before disclosing information or acting on a request. We aim to respond within 28 days, subject to any shorter applicable deadline, and explain any permitted extension. Requesting information does not automatically pause a deadline.
For a store's shopper data, start with the merchant or the store's privacy-request page. You can raise a concern with Tringify if you need help finding the responsible party. A request about one store does not apply automatically to every store using Tringify.
You can contact us to challenge a response and may complain to the relevant data-protection authority where that right applies. Withdrawing optional consent does not affect processing that lawfully occurred before withdrawal or processing supported by another applicable basis.
9. Children
Tringify business accounts are for people with the legal capacity to enter our agreements. Merchants must address the age and consent requirements applicable to their shoppers and products. If you believe personal information about a child has been provided to Tringify improperly, contact privacy@tringify.com so we can review and act on the situation.
10. Changes and contact
We maintain this policy with our service and practices. Material changes are communicated through the applicable account or notice channels. A policy notice is not itself consent to a new purpose that requires separate consent.
Tringify Ecommerce Private Limited, India. Privacy questions and requests: privacy@tringify.com. Security reports: security@tringify.com.
