Privacy Policy

01About this policy

This Privacy Policy explains how CommerceNerve (“we,” “us,” or “our”) handles personal information in connection with commercenerve.com and our NetSuite–Shopify integration service. It applies to website visitors, business contacts, and merchants using the service.

For merchant-controlled customer data, we act on the merchant’s instructions to provide the integration. The merchant remains responsible for its own privacy notices and the lawful collection and use of customer data. A separate written data processing agreement, where applicable, governs that processing.

02Information we collect

Information depends on how you interact with us and which integration flows you enable. It may include:

• Business contact information: your name, business email, company, store URL, inquiry content, and correspondence.
• Account and connection information: account identifiers, store identifiers, authorized users, permissions, and integration credentials needed to connect your platforms.
• Technical information: IP address, browser and device information, request times, session information, error reports, and operational logs generated when accessing the website or service.

The website contact form prepares a draft on your device. Form entries are not sent to CommerceNerve until you send the resulting email. Your email provider processes that email under its own terms.

03Merchant and customer data

Authorized integration data may include product descriptions and identifiers, inventory quantities, prices, customer names, business details, email addresses, and relevant contact or address fields. Tracking workflows may involve order or fulfillment references, shipment carriers, tracking numbers, and tracking URLs.

Access and processing are limited to the data needed for the configured flows and associated troubleshooting. We do not request payment card details or account passwords through the contact form. Please avoid sending sensitive customer records or credentials in general support messages.

04How information is used

We use information to respond to inquiries, set up and operate authorized integrations, synchronize configured records, diagnose failures, provide support, maintain service security, and meet legal obligations. We may also use operational information to understand and improve service performance.

Where a legal basis is required, processing may be necessary to perform a contract, pursue legitimate interests such as securing and supporting the service, comply with law, or act on your consent. Where consent is used, you may withdraw it without affecting prior lawful processing.

Merchant customer data is used to provide the authorized service, not to independently market to your customers. We do not sell personal information.

05Third-party platforms and sharing

CommerceNerve exchanges authorized data with Shopify and Oracle NetSuite to carry out the integration. Each platform independently controls its services, access permissions, and applicable privacy terms. Revoking access may prevent further synchronization.

We may share information with service providers supporting hosting, communication, or service operations to the extent necessary for those functions and subject to applicable confidentiality and data protection requirements. We may also disclose information when legally required, to protect rights and security, or in connection with a business transfer with appropriate protections.

Service providers or platforms may process information outside your country. Where applicable law requires safeguards for international transfers, those safeguards must be established through appropriate contractual or other lawful mechanisms.

06Data security

We seek to use reasonable technical and organizational safeguards appropriate to the information and processing involved, including controlled access to authorized integration connections. No method of transmission or storage is completely secure, and this policy does not represent a security certification or guarantee.

Merchants should protect their platform accounts, grant only necessary permissions, and promptly tell us about suspected unauthorized access. Contact us to discuss security requirements before connecting sensitive business data.

07Data retention

We retain personal information only as long as reasonably necessary for the purpose for which it was collected, including providing the service, resolving support requests, meeting legal obligations, and resolving disputes. Retention periods depend on the type of data, contractual requirements, and applicable law.

After a service relationship ends, integration access should be revoked and data deleted or returned as required by the applicable agreement and law. Limited records may remain for legal or security purposes, and backup copies may remain until their normal replacement cycle. Contact us for retention and deletion details relevant to your account.

08Cookies and session information

This marketing website does not intentionally set advertising or analytics cookies, and the contact form does not store your entries in browser storage. Hosting infrastructure may use technical session information or necessary cookies for security and delivery. A private preview may require hosting-provider authentication.

If optional analytics or tracking technologies are introduced, this policy will be updated and consent requested where required. You can manage cookies through your browser, although restricting necessary cookies may affect functionality.

09Your choices and rights

Depending on your location and applicable law, you may have rights to access, correct, delete, restrict, object to processing, or receive a portable copy of your personal information. You may also withdraw consent where applicable and complain to your local data protection authority.

Send requests to hello@commercenerve.com . We may need to verify your identity and authority before fulfilling a request. If your information was provided by a merchant, contact that merchant first; we will assist the merchant as required by our agreement and applicable law.

The service is intended for businesses and is not directed to children. If you believe a child has provided personal information, please contact us.

10Updates and contact

We may update this policy as the service or applicable requirements change. The date above identifies the latest revision. We will provide additional notice of material changes where required.

For privacy questions, rights requests, or information about the entity responsible for your service agreement, contact CommerceNerve at hello@commercenerve.com or through our Contact page.