Privacy Policy

About This Policy

This Privacy Policy explains how Tech Improvement Inc. ("Techimprovement", "we", "us" or "our") collects, uses, shares and protects personal information when you visit our website, create an account, buy our software or services, download our extensions, use our Shopify apps or contact us.

Tech Improvement Inc. is based in Philadelphia, Pennsylvania 19125, United States. We are the controller of the personal information described here, except where we handle data on behalf of a customer, as explained in "Data in Stores We Support".

Please read this policy together with our Terms and Conditions, License Agreement and Data Processing Consent. Questions are welcome at info@techimprovement.net.

Information We Collect

Information you give us

• Account details: your name, email address and password (stored in hashed form, never in plain text) and, if you provide them, your company name, billing address and tax or VAT number.
• Order details: the products and services you buy, the amounts paid, invoices, your billing address and the production domain you register for each license.
• Messages and support requests: what you send us by email, through the contact form or in support conversations, including attached files, screenshots and logs.
• Access details for support work: if you buy a support subscription, the admin logins, server credentials, code repository access and hosting access you choose to share with our engineers.
• Preferences: for example, whether you want to hear about new products.

Information from sign-in providers

You can sign in with a Google, Facebook, Apple, Microsoft, LinkedIn, Amazon, PayPal or Pinterest account. If you do, the provider sends us your name and email address so we can create your account or link it to an existing one. We never receive your password for that provider. If a provider gives us a private relay email address instead of your real one, we use the relay address.

Payment information

Card payments are processed by Stripe. Your full card number is handled by Stripe and is not stored by us. We receive confirmation of whether a payment succeeded, along with limited details Stripe makes available, such as the card brand, last four digits and expiry date, which help us identify the payment method and answer billing questions.

License, activation and download data

• the license keys issued to you and the production domain each key is bound to;
• activation records showing the domain on which a key was activated and when;
• the Composer access keys you generate and any domain you bind them to;
• a log of downloads from our private Composer repository, recording the package, version, IP address and time of each download.

Shopify app data

When you install one of our Shopify apps, Shopify shares the information the app needs to work, such as your shop's domain, its contact details and the status of your app subscription. An app can reach only the store data covered by the permissions you approve during installation, and we use that data only to provide the app's features.

Mobile phone number for sign-in codes

If you choose to receive sign-in verification codes by text message, we collect your mobile phone number and a record of your consent: the date and time, the number, the page where you agreed, the consent text you saw, your IP address and your browser. Giving a mobile number is optional. See "Text Messages (SMS)" below.

Information collected automatically

When you browse our website, our servers and store software record technical details such as your IP address, browser type, device and operating system, the pages you view, the referring page and the date and time of your visit. Some of this comes from cookies, described in "Cookies and Similar Technologies".

How We Use Your Information

We use personal information to:

• create and manage your account and let you sign in, including through social login;
• process orders and payments, issue invoices and keep accounting records;
• deliver our software by issuing and activating license keys, providing downloads and running the private Composer repository;
• enforce our license terms, for example by checking that a key is used on its licensed domain and spotting access keys that have been shared or leaked;
• provide support subscriptions, including working on your store, code repository or hosting when you give us access;
• answer your questions and support requests;
• send service messages such as order confirmations, license details, renewal reminders, security notices and important changes to our terms;
• send product news and offers where you have agreed or the law otherwise allows;
• keep our website and systems secure, prevent fraud and abuse, and fix technical problems;
• understand how the website is used and improve our products, using aggregated information where we can;
• comply with legal, tax and accounting obligations, and establish, exercise or defend legal claims.

We do not use your personal information for automated decision-making that has legal or similarly significant effects on you.

Legal Bases for Processing

If you are in the European Economic Area (EEA) or the United Kingdom, we rely on the following legal bases:

• Performance of a contract: to set up your account, process orders, deliver licenses, downloads, apps and support services, and act on requests you make before buying.
• Legitimate interests: to secure our systems, prevent fraud and license misuse, improve our products, keep business records and tell existing customers about similar products, as long as these interests are not outweighed by your rights.
• Consent: for optional cookies, for marketing where consent is required and for anything else we ask you to agree to first. You can withdraw consent at any time.
• Legal obligation: to keep tax and accounting records and respond to lawful requests from public authorities.

How We Share Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We disclose it only as follows:

• Service providers: companies that help us run the business, such as hosting, email delivery, backup and security providers. They act on our instructions and must keep the information secure.
• Stripe: to process card payments and help prevent payment fraud.
• SMS provider: if you choose sign-in codes by text message, Twilio receives your mobile number and the content of each message, only to deliver our verification codes to you.
• Sign-in providers: when you use social login, the provider you choose knows that you signed in to our store.
• Shopify: for apps installed through Shopify, including app billing, which Shopify handles.
• Professional advisers: such as accountants and lawyers, who are bound by confidentiality.
• Authorities: when the law requires it, or when needed to protect our rights, our customers or other people.
• Business transfers: if Tech Improvement Inc. is involved in a merger, acquisition or sale of assets, personal information may pass to the new owner, who must continue to protect it as described in this policy or tell you about any changes.

All the above categories exclude text messaging originator opt-in data and consent: this information will not be shared with any third parties or affiliates, except the SMS provider that delivers our text messages on our behalf.

We may also share aggregated or de-identified information that cannot reasonably identify you.

Data in Stores We Support

When our engineers work on your Magento, Adobe Commerce, Shopify or WordPress store under a support subscription, they may see personal information about your own customers, such as orders and contact details. We handle that information on your behalf, as a processor or service provider, and you remain responsible for it. For this data, we:

• access it only as far as needed to carry out the work you ask for;
• do not use it for our own purposes or disclose it except as needed for that work;
• limit access to the engineers assigned to your account and keep it confidential;
• avoid copying production data outside your environment unless a task requires it, and delete any such copies when the task is finished;
• help you, where reasonable, with requests from your customers and with security incidents affecting your data.

We recommend creating separate accounts or keys for our engineers and removing them when you no longer need our help. If your business needs a signed data processing agreement, please contact us.

International Data Transfers

We are based in the United States, and our systems and service providers may process information in the United States and other countries whose data protection laws differ from yours. When we transfer personal information from the EEA, the UK or Switzerland, we rely on a recognized safeguard, such as the European Commission's Standard Contractual Clauses with the UK addendum where it applies, or another mechanism permitted by law. You can ask us for details of these safeguards.

How Long We Keep Information

We keep personal information only as long as we need it for the purposes in this policy, unless the law requires or permits a longer period. As a guide:

• Account information: while your account is open. If you ask us to close it, we delete or anonymize it within 30 days, except for the records below that we must or may keep.
• Orders, invoices and payment records: 7 years after the transaction, for tax and accounting purposes.
• License keys and activation records: as long as the license remains in effect, because we need them to confirm your right to use the software and receive updates.
• Composer download logs: up to 24 months.
• Support messages and requests: up to 3 years after our last contact with you or the end of your support subscription, whichever is later.
• Access details for support work: only while we need them. We delete them from our records when the work or subscription ends, and ask you to revoke them on your side too.
• Mobile number and text message consent: your mobile number while text message codes are turned on or waiting for your confirmation; the record of your consent, including when it ended, for as long as we may need it to show that you agreed.
• Web server and security logs: up to 12 months.
• Marketing preferences: until you unsubscribe, after which we keep a minimal record of your opt-out so we do not contact you again.

Security

We use technical and organizational measures suited to our size and the data we hold, including encrypted connections (HTTPS), hashed passwords, access to production systems limited to people who need it, and keeping our software and servers up to date. Card details are handled by Stripe, so we never hold full card numbers.

No method of transmission or storage is completely secure, so we cannot promise absolute security. You can help by using a strong, unique password, keeping your license keys and Composer access keys private, and telling us straight away if you think your account or keys have been compromised. If a security breach affects your personal information, we will notify you and the relevant authorities where the law requires.

Your Privacy Rights

Depending on where you live, you may have some or all of the rights below.

EEA and UK residents (GDPR)

• Access: get a copy of the personal information we hold about you.
• Rectification: have inaccurate or incomplete information corrected.
• Erasure: have your information deleted when we no longer have a valid reason to keep it.
• Restriction: ask us to limit how we use your information, for example while we look into a concern.
• Portability: receive information you gave us in a machine-readable format, or have it sent to another provider.
• Objection: object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdrawal of consent: withdraw consent at any time, without affecting earlier processing.

You may also complain to the data protection authority where you live or work, or, in the UK, to the Information Commissioner's Office. We would appreciate the chance to resolve your concern first.

California residents (CCPA/CPRA)

If you live in California, you have the right to:

• know what personal information we have collected about you, where it came from, why we use it and to whom we disclose it;
• ask us to delete personal information we have collected from you, subject to legal exceptions;
• ask us to correct inaccurate personal information;
• opt out of the sale or sharing of your personal information, although we do not sell it or share it for cross-context behavioral advertising, and have not done so in the past 12 months;
• limit the use of sensitive personal information; the only such information we hold is account login details, which we use solely to provide our services and secure your account;
• not be treated differently for exercising these rights.

In the past 12 months we have collected identifiers (such as name, email address and IP address), commercial information (such as purchase history), internet activity (such as pages viewed) and account login details, from the sources and for the purposes described above. We disclose them for business purposes only to the recipients listed in "How We Share Information". You may use an authorized agent to make a request, and we may ask for proof of the agent's authority.

How to make a request

Email info@techimprovement.net with the subject line "Privacy request" and tell us what you would like us to do. We may need to confirm your identity, usually by asking you to confirm the request from the email address linked to your account. We aim to reply within one month, or within 45 days for California requests, and will tell you if we need more time where the law allows. Requests are free unless they are clearly unfounded or excessive. You can also update most account details yourself by signing in.

Cookies and Similar Technologies

Cookies are small text files that a website saves in your browser. Our store runs on Magento, which uses cookies and similar browser storage for these purposes:

• Session: keeps you signed in as you move from page to page.
• Form key: a security token that protects our forms against cross-site request forgery.
• Cart and private content: remembers your cart and shows information specific to you, such as your name in the account menu, while the rest of the page can still be cached.
• Cookie notice: remembers whether you have accepted our cookie notice.
• Recently viewed products: remembers products you looked at so we can show them again.

These cookies are needed for the store to work or for features you use, and most expire when you close your browser or after a limited period. If we enable analytics tools to understand how visitors use our website, those tools may set additional cookies. Where the law requires it, we will use them only with your consent and will update this policy to describe them.

You can block or delete cookies in your browser settings, but signing in, the cart and checkout will not work without essential cookies. Where the law requires it, we treat a Global Privacy Control signal from your browser as a valid opt-out request.

Emails We Send

Service emails about your orders, licenses, subscriptions and account are part of the service and cannot be switched off while your account is active. Newsletters and offers are sent only where you have agreed or the law permits, and each one includes an unsubscribe link.

Text Messages (SMS)

Text messages are optional. We collect your mobile phone number only if you choose to receive sign-in verification codes by text message, in My Account › Two-Factor Authentication or in the optional "Sign-in protection" section of the Create an Account page. We use the number only to send you one-time verification codes when you sign in or confirm a change to your sign-in security. We do not send marketing or promotional text messages.

We send text messages only after you tick a consent box that is never ticked in advance. We record your consent with the date and time, your mobile number, the page where you gave it, the consent text you saw, your IP address and your browser.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent will not be shared with any third parties, except the SMS provider that delivers the messages on our behalf (Twilio).

You can opt out at any time by replying STOP to any of our messages, or by turning off text messages in My Account › Two-Factor Authentication. Reply HELP for help, or email info@techimprovement.net. Message and data rates may apply.

We keep your mobile number in your account while text message codes are turned on or waiting for your confirmation, and remove it when you turn them off. We keep the record of your consent, including when it ended, for as long as we may need it to show that you agreed. Our SMS Terms describe the program in full.

Children's Privacy

Our products and services are intended for businesses and professionals. They are not directed at children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

Third-Party Services

Our website and products link to or work with services we do not control, such as Stripe, Shopify, the social sign-in providers listed above and Twilio, the SMS provider that delivers our text message sign-in codes. Their own privacy policies apply to the information they collect.

Changes to This Policy

We may update this policy when our services, the law or our practices change. We will post the new version on this page and update the "Last updated" date. If a change is significant, we will also tell you by email or with a notice on our website before it takes effect.

Contact Us

For questions, requests or complaints about this policy or your personal information, contact:

• Tech Improvement Inc. (Techimprovement)
• Philadelphia, Pennsylvania 19125, United States
• Email: info@techimprovement.net

You can also reach us through our contact page.