Privacy Policy

Last updated: 21 September 2026

B2B Lock ("the App") is operated by Artep tech (Aleksandar Stančević PR Računarsko programiranje Artep tech), Subotica, Serbia — registration no. 68211425, tax ID 115243761 ("we", "us"). The App lets Shopify merchants ("Merchants") hide prices and products from visitors who are not approved customers, and collect requests for a trade account. This policy describes how we collect, use and share information when a Merchant installs the App and when a visitor sends a trade-account request. For that request we act as a processor on the Merchant's behalf; the Merchant is the controller.

Information we collect

When you install the App we receive, through Shopify's APIs, information needed to operate the service:

• Store information: store name, myshopify domain, store owner email, plan type.
• Catalogue information: ids and titles of the products, collections and product tags a lock covers.
• Customer information: for customers carrying a tag one of your locks uses, we read the customer's id and those tags, and write them back as a metafield so Shopify's checkout can enforce the lock. We do not store your customer list on our servers.
• Trade-account requests: the name, email, company, phone, tax ID and message a visitor types into the "Apply for a trade account" form, so you can approve or decline it.

The App never receives orders, carts or card numbers.

How we use information

• To store the locks you create and push them to Shopify so your storefront and checkout can enforce them.
• To show you trade-account requests and, when you approve one, to tag that customer in Shopify.
• To email the applicant that their account was opened or declined, and to email you about new requests or a lock that stopped working.
• To provide support and to operate, secure and improve the service.

We do not sell personal information and we do not use it for advertising.

Sharing

We share information only with processors needed to run the App: our hosting provider (Fly.io, servers in Frankfurt, Germany) and our transactional email provider (Resend, EU region) for notifications. Each processor acts on our instructions and is bound by data-processing terms. We do not sell personal data. We may disclose information if required by law or to protect our rights.

International transfers

Data is stored in the European Union. Where a processor transfers data outside the EU/EEA, it does so under standard contractual clauses or an equivalent lawful mechanism.

Retention and deletion

Locks, settings and trade-account requests are kept while the App is installed. When a Merchant uninstalls the App, Shopify sends us a shop redaction request and we delete all data for that store within 30 days. A customer redaction request from Shopify erases that person's trade-account requests immediately, and a data request returns them to the Merchant.

Security

Data is transmitted over TLS and stored on access-controlled infrastructure. Access tokens are stored encrypted at rest by the hosting provider and are never exposed to browsers.

Your rights

Depending on where you live (including the EU/EEA, UK and California) you may have the right to access, correct, delete, port or restrict processing of your personal information, and to object to processing or lodge a complaint with a supervisory authority. Applicants should contact the Merchant they applied to; Merchants may contact us at support@arteptech.com. We respond within 30 days.

Children

The App is intended for businesses and is not directed at children under 16; we do not knowingly collect their data.

Changes

We may update this policy; the date above shows the latest version. Material changes will be announced inside the App.

Contact

Artep tech (Aleksandar Stančević PR Računarsko programiranje Artep tech), Subotica, Serbia — registration no. 68211425, tax ID 115243761 · support@arteptech.com