Privacy Policy

Tempered Tools ("we", "our", or "us"), a subsidiary of Fire Burns Up Inc., is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Shopify applications and visit our website at temperedtools.xyz.

Information We Collect

Information from Shopify

When you install one of our Shopify apps, we receive access to certain information from your Shopify store based on the permissions (scopes) you grant. This may include:

• Store information (name, domain, email)
• Theme data (for apps that modify themes)
• Product information (for review and inventory apps)
• Order data (order numbers, line items, fulfillment status)
• Customer data (only when necessary for app functionality, as detailed below)

Information You Provide

We collect information you voluntarily provide, including:

• Contact form submissions (name, email, message)
• Account registration details
• Support ticket information
• Billing information (processed by Shopify)

Automatically Collected Information

We automatically collect certain information when you visit our website:

• IP address and browser type
• Pages visited and time spent
• Referring website
• Device information

Customer Data by Application

We follow the principle of data minimization. Each application accesses only the specific customer data required for its core functionality. No application accesses data beyond what is listed here.

How We Use Your Information

We use your information to:

• Provide and maintain our apps and services
• Process transactions and send billing notifications
• Respond to your inquiries and support requests
• Send important updates about our services
• Improve our apps and develop new features
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not use customer personal data for marketing, advertising, profiling, or any purpose other than the specific app functionality described above. We do not sell customer data.

Data Sharing and Disclosure

We do not sell your personal information. We may share information with:

• Service providers: Third parties that help us operate our business (hosting, email delivery). All service providers are contractually bound to process data only on our behalf and in accordance with this policy.
• Legal requirements: When required by law or to protect our rights
• Business transfers: In connection with a merger, acquisition, or sale of assets

Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy:

• On uninstall: When you uninstall any Tempered Tools app, we delete all associated store and customer data from our systems within 30 days.
• Waitlist and notification data: Automatically purged after notification delivery or after 12 months of inactivity, whichever comes first.
• Form submissions: Retained until the merchant deletes them or uninstalls the app.
• Return records: Retained for the duration of the merchant's return policy window plus 90 days, then deleted.

Shopify Compliance Webhooks

All Tempered Tools applications implement Shopify's mandatory privacy compliance webhooks:

• Customer data request: We provide all personal data associated with a customer upon request from the merchant or Shopify.
• Customer data erasure: We delete all personal data associated with a customer within 30 days of receiving a redaction request.
• Shop data erasure: We delete all data associated with a shop within 30 days of receiving a shop redaction request.

Your Rights

Depending on your location, you may have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information
• Object to or restrict processing of your information
• Data portability
• Withdraw consent
• Opt out of the sale of personal data (we do not sell personal data)

To exercise these rights, contact us at privacy@temperedtools.xyz. We will respond within 30 days.

Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption in transit (TLS) and at rest
• Encrypted database backups
• Access controls with role-based permissions
• Audit logging of access to personal data
• Separation of test and production environments

For full details on our security practices, including our incident response policy, see our Security Policy.

Cookies

We use essential cookies to maintain session state and preferences. We do not use third-party tracking cookies. You can control cookies through your browser settings.

Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us.

International Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy, please contact us at: