B2B Launchpad — Privacy Policy

Last updated: July 7, 2026

What data we access

B2B Launchpad accesses the following Shopify store data to provide its functionality:

• Companies and contacts — to create and manage B2B companies, contacts, and role assignments when registrations are approved.
• Products — to display products in the quote builder and discount configuration.
• Draft orders — to create draft orders from the quote builder.
• Markets — to assign companies to B2B markets and retrieve catalog pricing.
• Discounts — to manage B2B-exclusive automated discounts via Shopify Functions.
• Customer data — contact names and emails displayed in the quote builder and registration detail pages (requires protected customer data access).

What data we store

B2B Launchpad stores the following data in a Cloudflare D1 database:

• Registration requests — company name, address, tax ID, notes, and submission status. This is the data submitted through the registration form before approval.
• Registration contacts — first name, last name, email, phone, and role for each contact in a registration request.
• Shop settings — your store domain, plan, default catalog, auto-approval settings, and monthly registration count.
• Session tokens — Shopify OAuth access tokens required to make API calls on your behalf.

Once a registration is approved, the company and contact data lives in Shopify. We do not duplicate or sync this data — Shopify is the source of truth for approved companies.

How data is used

Your data is used solely to provide the app's functionality: processing registration requests, creating companies in Shopify, building quotes, and applying B2B discounts. We do not sell, share, or use your data for advertising or analytics purposes.

Data retention

Registration request data is retained as long as the app is installed. When you uninstall the app, all stored data (registration requests, contacts, settings, and session tokens) is permanently deleted in response to Shopify's data deletion webhook.

Data security

All data is encrypted in transit (TLS) and at rest (Cloudflare D1 encryption). Access tokens are stored securely and used only for authorized Shopify API calls. The app runs on Cloudflare Workers with no persistent server — reducing attack surface.

Third-party services

B2B Launchpad uses the following third-party services:

• Cloudflare Workers — application hosting and compute.
• Cloudflare D1 — database storage for registration data and settings.
• Shopify Admin API — to manage companies, contacts, draft orders, discounts, and markets on your store.

No other third-party services receive your data.

Contact

For questions about this privacy policy or your data, contact us at scratchlabsdigital@gmail.com.