Privacy Policy

1. Roles

For merchant account data and information we collect to operate the Voss service, Voss generally acts as a controller or business responsible for that data. For shopper data processed through a merchant's checkout, the merchant generally determines why that data is processed and Voss generally acts as a processor or service provider on the merchant's behalf.

The Data Processing Addendum describes that processor relationship in more detail.

2. Data we collect

Merchant and account data

This can include name, email address, authentication information, store details, Shopify store identifiers and connection data, Whop connection information, billing records, support communications, IP address, device/browser information and account activity.

Shopper and transaction data

Depending on the merchant's checkout configuration, Voss may process shopper name, email, phone number, shipping/billing address, cart contents, product/variant identifiers, discounts, shipping selections, totals, currency, order identifiers, payment status, device information, referral/UTM information and tracking-event data.

Full card details are entered into the payment interface provided for the connected Whop payment flow and are not intended to be stored by Voss.

Website analytics

With analytics consent where required, Voss may use browser storage to create a visitor identifier and session identifier and may collect page views, referrer and campaign parameters to understand how people find and use the Voss website.

3. How we use data

• Provide, authenticate, secure and support Voss accounts.
• Connect Shopify and Whop integrations requested by the merchant.
• Calculate and verify checkout details and create/sync paid Shopify orders.
• Operate billing, analytics, fraud/security controls and product diagnostics.
• Provide merchant-requested tracking integrations such as Meta or TikTok checkout events.
• Communicate about service, security, support and account matters.
• Comply with law and enforce our policies.
• Improve reliability, usability and performance.

4. Legal bases where GDPR or similar laws apply

Depending on the context, we rely on performance of a contract, legitimate interests in operating and securing the service, compliance with legal obligations, and consent where the law requires consent, including for non-essential website analytics technologies.

5. How we share data

We share data only as reasonably needed to provide the service, comply with law, protect rights and security, or complete a business transaction. This includes service providers and connected platforms such as Shopify, Whop, infrastructure providers and other vendors listed on our Subprocessors page.

We do not sell personal data to advertisers. We do not give advertisers access to merchant or shopper conversations or account data.

6. Shopify and Whop

When you connect Shopify or Whop, those services process data under their own terms and privacy policies. Voss is not responsible for their independent processing, account decisions or privacy practices.

7. Retention

We keep personal data only as long as reasonably necessary for the purposes described above, including to provide the service, maintain transaction/audit history, meet tax or legal obligations, resolve disputes, prevent fraud and enforce agreements. Retention periods can vary by data type and merchant configuration. Data can also remain in backups for a limited period after deletion from active systems.

8. Security

We use technical and organizational safeguards appropriate to the service, including access controls, encryption in transit, restricted service credentials, tenant separation and monitoring. No internet service can guarantee absolute security.

9. International transfers

Voss and its service providers may process data in countries other than where the merchant or shopper is located. Where required, we use legally recognized transfer mechanisms or rely on another lawful basis for the transfer.

10. Your rights

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, or complain to a regulator. For shopper data held on behalf of a merchant, the fastest route is usually to contact the merchant you purchased from; we will assist the merchant as required by applicable law and our DPA.

11. Children

Voss is intended for business users and is not directed to children. We do not knowingly offer Voss merchant accounts to people under 18.

12. Cookies and similar technologies

See our Cookie Policy for details and choices.

13. Changes

We may update this policy when the product, vendors or legal requirements change. The current version and last-updated date will be posted here.

14. Contact

Privacy and data-rights requests can be sent to support@vosscheckout.com.