Privacy policy

What Indie Wholesale stores, why, and how to have it deleted. Last updated Oct 28, 2026.

Who we are

Indie Wholesale runs indiewholesale.com and the Indie Wholesale app for Shopify. Stores order wholesale from independent brands through us, and each brand is paid on its own Shopify checkout.

What we store

• Store accounts. When a store signs up to buy wholesale: its email, store name, contact name, shipping address, phone if given, and resale certificate number if given.
• Orders we create. What a store ordered, the prices and discounts it saw, and the payment status the brand's Shopify reports back.
• The brand's catalog. A copy of the brand's product titles, descriptions, photos, prices and stock status, so stores can browse it.
• Invitations. When our sales agent invites a store to a brand's wholesale store: the store's business email, name, city and state, and whether it opened the invitation. A store that opts out is not emailed again.
• Page visits. Which brand pages are viewed, where the visit came from (the referring site or campaign link), and a random visitor id kept in a first-party cookie or in the brand store's page, linked to a store account once it signs in. No IP address is kept. Visits are kept 90 days, then only daily totals. We use no third-party analytics or advertising trackers.
• The brand's app settings. The Shopify store address, an access token (encrypted), billing status, and the settings the brand chooses in the app.

What we never store

• Card or bank details. Stores pay on the brand's own Shopify checkout; we never see the payment.
• The brand's own shoppers. The app does not read the brand's customer list or its retail orders. It only reads the orders it created.

How we use it

To invite stores that fit a brand's products, show the catalog, take orders, send each order to the brand's Shopify as a draft order, send sign-in codes and order notices, and work out our fee on orders we bring.

A store's account is with Indie Wholesale and works with every brand on it, so we may email a store about independent brands that fit it. Every such email has a link to stop them. We never sell data.

Contact lists a brand gives us (its own customers and leads) are used only for that brand: to invite those stores to its wholesale store. We keep only retail businesses from them; personal shoppers and invalid emails are removed and not stored.

Who else sees it

The brand a store orders from, or asks for free samples, sees that order or request and the store's details, because the brand ships it. Shopify processes the order and our billing. Our email provider sends sign-in codes and order notices. Our hosting provider stores the data on our servers.

When a brand's wholesale page or its wholesale terms change, we send the addresses of those public pages (for example yourbrand.com/apps/wholesale) to search engines through IndexNow, so Bing and others show the current version. Only the page addresses are sent, never store or order data.

How we protect it, and how long we keep it

All our data is stored encrypted, backups are encrypted and kept 60 days, and every view of a store's details by our staff or a brand is logged. Store accounts not used for 36 months have their personal details removed automatically (a signed resale certificate behind a tax-free order is kept indefinitely, as the brand’s sales tax record), and page visits are kept 90 days. The full periods and our security practices are on our security page.

Deletion

• When a brand uninstalls the app, we stop using its access token at once and take its store offline. Shopify asks us to erase the brand's data 48 hours later; we then delete its tokens and settings and remove its catalog. We keep order records for accounting.
• On request. A store can ask us to delete its account by writing to the address below. We answer within 30 days.

Contact

Questions or requests: support@indiewholesale.com.