Privacy policy

1. Who handles what

For merchants, CheckoutSwitch decides how your account details are used, as this page describes.

For shoppers, we act for the store. We handle a shopper's details only to take their order and payment for that store, as the store asks. The store is responsible to its shoppers for how their details are used, and its own privacy policy applies.

2. What we keep about you as a merchant

• Your account: your email address, your password as a one-way scrypt hash (never the password itself), and when you signed up, confirmed your email, last signed in and last changed your password. We do not ask for your name, phone number or address.
• Sign-in protection: for each sign-up, sign-in and password reset attempt, the email address used and the IP address it came from, so we can slow down anyone guessing passwords. We clear out these records after about a day.
• Your plan: Whop takes the payment for your plan and holds your card details. We receive the state of your plan from Whop: whether it is paid, when it renews or ends, and the link to manage it.
• Emails: we send you the emails your account needs: confirming your address, resetting your password, a declined card, and a store going live, pausing or getting its own domain. We send no marketing email.

3. What we keep about your stores

• Shopify: your store's address, the client ID and secret of the app you created, the access token we get with them, and, if you give us one, the Theme Access password. Before we change your theme's layout file, we keep a copy of it, so the change can be undone.
• Whop: your Whop API key and company ID, and the product and webhook we create in your Whop for the checkout.
• Your checkout: the store's name, logo address, colours and domains, and, if you add them, your Google Ads ID and conversion labels, your Meta Pixel, TikTok Pixel and Google Analytics 4 IDs, and the access tokens or API secrets that let our server send those platforms your purchases.
• Checkouts and payments: for each checkout, its ids, amounts, currency, status and the Shopify order it became. No names, emails, addresses or phone numbers.

Keys, secrets, the Theme Access password and the copies of your layout file are stored encrypted, and the app never shows a key back to you once it is saved.

4. Support conversations

When you choose to open human chat, tawk.to provides the chat service. It receives your messages, any contact details or attachments you submit, and technical information such as your IP address and browser. It may use cookies or browser storage to maintain the conversation. We use this information to answer your support request. Please do not send passwords, API secrets or card details in chat. You can also contact hello@checkoutswitch.com for support or to request deletion of your support conversation.

5. What happens to shoppers' details

A shopper types their email, name, phone number and addresses into the checkout. Those details are sent to the store's Shopify, where they become the order, and to Whop's payment box, which takes the payment into the store's own Whop account. We do not write them to our database.

Card details are typed into Whop's payment box, which Whop serves from its own site. They never pass through CheckoutSwitch.

As a shopper types an address, the text goes to Google Places to suggest matching addresses.

If the store has added its Google Ads ID, Google's tag runs on the checkout and on the thank-you page with the store's own ID. It tells Google about the purchase, including the shopper's email address, which Google's tag scrambles (hashes) before sending, and Google may set its own cookies. The ad click id a shopper arrived with is kept with their order in Shopify, so the store can see which ad led to the sale.

If the store has added its Meta Pixel, TikTok Pixel or Google Analytics 4 ID, that platform's tag runs on the checkout and the thank-you pages with the store's own ID. It tells the platform that a checkout started and about the purchase: its amount, currency and an order reference, with the shopper's email address, which the tag scrambles (hashes) before sending. If the store has also added that platform's access token or API secret, our server sends the same purchase to the platform once the order is made, with the shopper's email address, phone number, name, postal code and country scrambled (hashed), their IP address and browser type, and the ids that platform's tag gave their browser. Our server holds these in memory for up to two days, and never writes them to our database.

Like any web server, ours writes a technical log of the requests it answers. We take email addresses and sign-in links out of these logs, and we do not log shoppers' names or addresses.

6. Cookies and storage in the browser

• www.checkoutswitch.com: we use Google Analytics to count visits, see which pages and links bring people here, and count presses of the sign-up, sign-in and demo links. Google Analytics sets its own cookies (up to 2 years) to tell one visit from the next. For visitors in the EEA, the UK and Switzerland it sets none and sends only cookieless counts. We turn off Google's advertising storage and ad personalisation on this site, and send no form fields or personal details to it. Opening human chat also loads tawk.to, which may use its own cookies or storage for your conversation.
• The app (app.checkoutswitch.com): three cookies, all needed for the app to work: your sign-in (up to 30 days), a sign-up check that ties your confirmation email to the browser you signed up in (24 hours), and a one-time notice (2 minutes). The app also remembers, for the open tab only, which steps you have copied. The sign-up, sign-in and “Check your email” pages run the same Google Analytics as www.checkoutswitch.com, with the same settings, and count that an account was created; they send no form fields to it, and no page inside your account runs it.
• The checkout and the store's pages: when a shopper arrives from a Google ad, the ad's click id is kept in a cookie and in the browser's storage for 90 days, so the store's sale can be matched to its ad. If the store uses Google Ads, Google's tag sets its own cookies, and so may the tags of Meta, TikTok and Google Analytics if the store uses them. The checkout notes in the browser's storage which purchases those tags have sent, so none is sent twice. We set no other cookies there.

7. Who else handles data

We use these services to run CheckoutSwitch. Each one gets only what it needs.

• Railway: hosts our servers and our database.
• Resend: sends our emails.
• Whop: takes shoppers' payments into each store's own Whop account, and takes the payments for our plans.
• Shopify: receives the orders, in each store's own Shopify.
• Google: suggests addresses as shoppers type, runs a store's Google Ads and Google Analytics tags when the store has added them, and runs Google Analytics on our own website.
• Meta and TikTok: run a store's Meta Pixel or TikTok Pixel, and receive its purchases from our server, when the store has added them.
• Telegram: carries alerts to our own team about stores and payments. Alerts name stores and payment ids, never shoppers.

We do not sell data, and we share it for advertising only through the ad tags a store adds, as described above. We would share it with others only if the law requires us to, or to protect people from fraud or harm.

These services run servers in different countries, so your data may be handled outside the country you live in.

8. How long we keep it

• Your account details: for as long as your account is open.
• Sign-ins: up to 30 days, or 7 days without use. Sign-in attempts: about a day. Email links: they stop working after 24 hours (a password reset link after 1 hour).
• When you delete a store, we delete its Shopify and Whop keys, its Theme Access password, the access tokens and API secrets of its tags and its domains at once, remove the webhook we made in its Whop, and take our line out of its theme.
• We keep a deleted store's name and settings, and the records of its checkouts and payments (ids, amounts and order numbers, no shoppers' details), because they may be needed for a refund, a dispute, our accounts or the law.

9. How we protect it

Every page is served over HTTPS. Passwords are stored only as one-way hashes, and sign-ins and email links only as hashes of their codes, so a copy of our database would not let anyone sign in. Keys and passwords for your stores are encrypted, and the key that unlocks them is kept apart from the database.

No system is perfectly safe. If we learn of a breach that affects your data, we will tell you without delay.

10. Your choices and rights

You can see and change your email and password in the app, and delete a store at any time from its Settings. To get a copy of your data, correct it, or have your account deleted, write to hello@checkoutswitch.com. We will answer within 30 days. We may keep what the law, a refund or a dispute requires.

Shoppers: your order and your details are with the store you bought from, so please ask the store first. If you write to us, we will pass your request to the store and help it answer.

CheckoutSwitch is for businesses, and not for anyone under 18.

11. Changes to this policy

We will update this page when what we collect or how we use it changes. If a change matters to you, we will email you before it applies. The date at the top is the date of the last change.

12. Contact

Write to hello@checkoutswitch.com about anything on this page.