Privacy Policy

Last updated: July 16, 2026

1. Introduction

Total Order Systems LLC ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use CashVector (the "Service"). As a B2B application, we strictly process data to provide financial forecasting services to your business.

We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and applicable data protection laws regarding the collection, use, and retention of financial data.

2. Information We Collect (And What We Don't)

To generate accurate cash flow forecasts, we request necessary read-only permissions via the Shopify API. We practice strict data minimization. We collect:

• Store Data: Up to 365 days of historical order totals, payout schedules, refund data, and inventory metrics.
• Account Data: Merchant email, store URL, and chosen subscription tier.
• Connected Platforms: Ad spend data (e.g., Meta, Google Ads) if you voluntarily connect those integrations.

Strict Zero-PII Policy: We DO NOT collect, process, or store your end-customers' Personally Identifiable Information (PII), including their names, email addresses, phone numbers, or physical shipping addresses.

3. How We Use Your Data & AI Transparency

We use your data exclusively to:

• Algorithmic Forecasting: We utilize artificial intelligence and statistical models to analyze your historical sales velocity and generate predictive cash flow dashboards. These models do not make automated legal or credit decisions against you or your customers.
• Process Shopify App Store billing.
• Send critical system alerts (e.g., low cash runway warnings) and service updates.
• Anonymize and aggregate metrics to provide industry benchmarking (no identifiable store data is ever shared).

4. Data Security, Storage & Retention

We employ enterprise-grade security, utilizing secure cloud infrastructure with strict Row Level Security (RLS) policies. Your sensitive API credentials and connection tokens are encrypted at rest. We do not sell your data to third-party data brokers.

Retention: We retain active store data for the duration of your subscription. If you uninstall CashVector from your Shopify store, we retain historical data for a 90-day grace period to facilitate re-onboarding, after which it is slated for automated permanent deletion.

5. Third-Party Service Providers

We share limited data with trusted infrastructure partners strictly to operate the Service:

• Supabase: Secure database hosting.
• Upstash: API rate limiting and performance caching.
• Resend: Transactional email delivery.

6. Your Data Rights

Depending on your jurisdiction, you have the right to access, correct, export, restrict the processing of, or erase your personal data. You may request a data export or immediate deletion of all store data at any time by contacting our privacy team.

7. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

Total Order Systems LLC
Email: support@cashvector.app