Privacy Policy

What We Collect

We collect the information needed to run Plushtrap orders and support: name, email, shipping address, billing details handled by payment processors, order history, product preferences, support messages, and site activity such as page views and cart events.

When you connect with Plushtrap through marketplaces or commerce platforms, we may receive seller-approved order, product, inventory, fulfillment, customer-service, and shop-performance data from those platforms.

How We Use Data

We use customer and marketplace data to process orders, fulfill shipments, prevent fraud, answer support requests, manage returns, keep product listings accurate, improve the site, and sync products, inventory, and orders between Plushtrap, CommerceOS, Amazon, TikTok Shop, and other approved commerce systems.

We also use limited analytics and marketing data to measure site performance, attribution, abandoned carts, email campaigns, and product demand.

Marketplace API Access

If Plushtrap uses TikTok Shop, Amazon, Shopify, Stripe, Shippo, Brevo, or another commerce API, access is limited to the scopes required for seller operations such as listing management, order import, fulfillment updates, inventory syncing, customer service, and compliance reporting.

Marketplace API data is not sold. It is shared only with service providers that help operate the store, complete orders, provide support, secure the account, or satisfy platform and legal obligations.

TikTok Shop and TikTok US seller-authorized data is accessed only by authorized Plushtrap operations, support, engineering, and security personnel with business need. Plushtrap stores and processes this data in the United States unless TikTok has approved another location in writing.

Retention and Security

We keep business records for as long as needed for accounting, tax, fraud prevention, support, chargebacks, marketplace compliance, and legal obligations.

We protect account and marketplace data with access controls, least-privilege permissions, multi-factor authentication, encrypted transport, encryption at rest where supported by the service, secret storage, endpoint protection, network monitoring, vulnerability management, and operational logging. Access is limited to people and systems that need it to operate Plushtrap.

At the end of a contractual relationship, Plushtrap deletes or returns collected customer and seller-authorized data in its possession unless retention is required for legal, tax, fraud-prevention, chargeback, security, or marketplace-compliance obligations.

Your Choices

You can request access, correction, deletion, or marketing opt-out by contacting us. Some order records may need to be retained where required for tax, fraud prevention, chargeback, or marketplace compliance reasons.

Marketing emails include unsubscribe controls. Transactional order, fulfillment, and support messages may still be sent when needed to complete a purchase or respond to a request.

Plushtrap supports seller and platform requests to access, update, delete, or provide personal data where required by law, platform policy, or contract.

Breach Notification

Plushtrap maintains incident-response procedures for suspected or confirmed data-security events. When a data breach affects marketplace, seller, or customer personal data, Plushtrap will notify impacted platforms, sellers, service providers, and regulators as required by contract and applicable law.