Effective date: [DATE] Operated by: Merchant Marvels, Dover, Delaware, USA Contact: [info@merchantmarvels.net] · 302-208-6030

Merchant Marvels Online Ordering (“the App”) connects a merchant’s WordPress/WooCommerce website to their Clover point-of-sale system. This policy explains what information the App collects, how it is used, and the choices merchants have. It applies to the App, the merchant dashboard at sync.merchantmarvels.com, the WordPress plugin, and the companion app that runs on Clover devices.

1. Who this policy covers

• Merchants — businesses that install the App on their Clover account and connect their website.
• Customers — people who place orders on a merchant’s website. We process customer data only on the merchant’s behalf and under the merchant’s instructions.

2. Information we collect

From your Clover account (via Clover OAuth, with your authorization):

• Merchant ID, business name, address, and owner email
• OAuth access and refresh tokens, used only to act on your behalf with the Clover API
• Inventory items, categories, prices, SKUs, and stock status
• Orders created by the App and their payment status

From your website (via the WordPress plugin):

• Your website URL and the API credentials issued by the App
• Order details when a customer checks out: line items, quantities, prices, order notes, and the customer’s name, email address, phone number, and delivery or pickup details as entered on your site

From your use of the dashboard and device app:

• Sign-in email, session information, settings and preferences (printers, notifications, sync options)
• Technical logs: IP address, browser or device type, timestamps, request paths, and error details

What we do not collect: the App never receives, processes, or stores payment card numbers. Card payments on your website are processed by Clover’s own payment services; the App only records that a payment was completed.

3. How we use information

• To create orders in your Clover account from website orders
• To sync your Clover menu to your website
• To display orders, print receipts, and send notifications on your Clover devices
• To authenticate you and secure your account
• To operate, maintain, troubleshoot, and improve the service
• To provide support and communicate about the service

We do not sell personal information, and we do not use customer order data for advertising.

4. Who we share information with

• Clover (Fiserv, Inc.) — order, inventory, and merchant data are exchanged with Clover’s platform under Clover’s own terms and privacy policy.
• Your website — menu data is sent to your WordPress site; order data is received from it.
• Hosting and infrastructure providers — we use third-party cloud hosting (currently Railway) and DNS/network providers to run the service. They process data only to provide those services.
• Legal requirements — we may disclose information if required by law, subpoena, or to protect our rights, users, or the public.

5. Data retention

• Merchant account data and tokens are kept while your account is connected. When you uninstall the App or ask us to close your account, we delete your tokens promptly and your remaining account data within 30 days.
• Order records are kept for as long as needed to display order history in the dashboard, and in any case no longer than [24 months], unless you ask us to delete them sooner.
• Technical logs are kept for a limited period for security and troubleshooting.

6. Security

Data is transmitted over TLS (HTTPS). Access tokens and credentials are stored encrypted or hashed where possible, access to production systems is restricted, and requests from your website to the App are signed to prevent tampering. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your choices and rights

• Merchants can review and update settings in the dashboard, regenerate API credentials, disconnect their Clover account, and uninstall the App at any time.
• Customers should direct requests about their personal data to the merchant they ordered from; we will assist merchants in responding.
• Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal information. Contact us using the details above to exercise these rights.

8. Children

The App is a business tool and is not directed at children under 13. We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this policy from time to time. Material changes will be noted on this page with a new effective date and, where appropriate, communicated to merchants by email.

10. Contact

Merchant Marvels Dover, Delaware, USA [info@merchantmarvels.net] · 302-208-6030