Information we collect
We collect account information such as names, email addresses, company details, workspace membership, authentication identifiers, and support communications.
When merchants use Throttle, we process commerce data such as customers, carts, orders, subscriptions, payment status, fulfillment information, webhook configuration, application settings, and related metadata.
We also collect technical information such as IP address, device and browser details, log data, API request metadata, and usage information needed to secure, operate, and improve the service.
Payment and provider data
Throttle connects merchants to payment providers and payment orchestration services. We do not sell payment data. Sensitive payment credentials are handled according to the connector flow and are not intentionally logged. Where possible, Throttle stores non-secret connection metadata rather than raw provider secrets.
Payment card data and payment method details may be processed by our payment infrastructure providers and the merchant's selected payment providers, including Stripe when a merchant connects Stripe through Throttle.
How we use information
We use information to provide and secure Throttle, process merchant requests, support checkout and payment workflows, deliver notifications and webhooks, troubleshoot issues, prevent abuse, comply with law, and communicate about the service.
How we share information
We share information with service providers that help us operate Throttle, including infrastructure, authentication, payment orchestration, payment processing, analytics, support, email, and monitoring providers.
We may disclose information if required by law, to protect rights and safety, or in connection with a business transaction such as a merger, acquisition, financing, or sale of assets.
Data retention
We retain information for as long as needed to provide Throttle, comply with legal and accounting obligations, resolve disputes, enforce agreements, and maintain security and audit records.
Security
We use administrative, technical, and organizational safeguards designed to protect information. No system is perfectly secure, but we work to limit access, separate test and live environments, and protect credentials and operational data.
Your choices
You may contact us to request access, correction, deletion, or export of personal information where applicable. Some information may be retained when required for security, legal, tax, audit, or service-continuity reasons.
International use
Throttle is operated from the United States. If you use the service from another jurisdiction, your information may be processed in the United States or other locations where our providers operate.
Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the effective date and provide additional notice when appropriate.
Contact
Questions about this Privacy Policy can be sent to [email protected] or through the contact page.