Effective date: July 26, 2026
This Privacy Policy describes how ShopStacks Inc., a wholly owned subsidiary of Turtles.com Inc. (collectively with its parents, subsidiaries, and affiliates, "ShopStacks," "we," "us," or "our"), collects, uses, shares, and protects personal information when you visit our websites; create or manage an account; build, configure, or operate a storefront, auction site, or marketplace; sell or fulfill goods; shop on or interact with a ShopStacks-powered storefront; communicate with us; or otherwise use any ShopStacks product, service, application, or website (collectively, the "Service").
This Policy is incorporated into and forms part of our Terms of Service. Capitalized terms not defined here have the meaning given there.
This Policy applies to personal information processed by ShopStacks as a business under U.S. state privacy laws (including the California Consumer Privacy Act as amended by the California Privacy Rights Act, the "CCPA," and other comprehensive state privacy laws).
The Service is intended for users in the United States. ShopStacks, our infrastructure, and our personnel are located in the United States. If you access the Service from elsewhere, you acknowledge that your information will be transferred to and processed in the United States.
Where a Builder operates a storefront using the Service, the Builder is the controller of the personal information of its shoppers, and ShopStacks processes that information as the Builder's service provider under the Builder's instructions and plan agreement. This Policy describes our own practices; each storefront's own privacy notice governs that storefront's relationship with its shoppers.
Information you provide. Account details (name, email, password, phone), business details (store name, business address, tax identifiers), payout and billing details (handled by our payment processors; we do not store full card numbers or bank credentials), listings and other content you upload, bids and purchases you make, messages you send through the Service, and anything you submit to our support and sales teams.
Information collected automatically. Device and log data (IP address, browser and OS, pages viewed, referring URLs, timestamps), approximate location derived from IP, usage data about how you interact with the Service, and information from cookies and similar technologies used for sign-in, preferences, analytics, and fraud prevention.
Information from other sources. Identity-verification and fraud-screening results from our vendors, catalog and order data from integrations you connect (for example Shopify, WooCommerce, or shipping carriers), and network activity when your storefront interacts with the Turtles network (for example bids on network auctions carried on your site).
We use personal information to provide and operate the Service; create and manage accounts; process orders, bids, payments, and payouts; sync inventory and syndicate listings where enabled; power AI features such as AI-generated listings and AI customer support; provide customer support; personalize and improve the Service; monitor for fraud, abuse, and security incidents; comply with legal obligations (including KYC/AML); enforce our agreements; and, with your consent where required, send marketing communications you can opt out of at any time.
We may use information that has been de-identified or aggregated for any lawful purpose, including improving our AI features. We do not use the content of your private support conversations to market to your customers.
We share personal information with: service providers (hosting, payments, analytics, communications, identity verification) bound by contractual confidentiality and use restrictions; Turtles.com Inc. and affiliates to operate the network features of the Service and for the purposes in this Policy; Builders and sellers, when you transact through a storefront (the storefront operator and the fulfilling seller receive the order details needed to fulfill your purchase); integration partners you choose to connect; professional advisors and authorities where required by law or to protect rights, safety, and the integrity of the Service; and successors in a merger, acquisition, or asset sale, subject to this Policy.
We do not sell your personal information for money. Where analytics or advertising cookies constitute "sharing" or "targeted advertising" under state privacy laws, you can opt out as described in Section 7.
We keep personal information for as long as needed for the purposes above, generally for the life of your account plus the period required for legal, tax, accounting, fraud-prevention, and dispute purposes, and then delete or de-identify it. Builders can export their storefront data for thirty (30) days after termination as described in the Terms of Service.
We maintain administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit, access controls, and monitoring, aligned with the security program of our parent company's platform. No system is perfectly secure; please use a strong, unique password and enable multi-factor authentication where available.
Depending on your state, you may have rights to access, correct, delete, or receive a portable copy of your personal information, and to opt out of targeted advertising, sale, or certain profiling. You can exercise these rights by emailing privacy@shopstacks.com or using the tools in your account settings. We will verify your request and respond within the time required by law, and we will not discriminate against you for exercising your rights. Authorized agents may submit requests with proof of authorization. If we decline a request, you may appeal by replying to our decision email.
If you are a shopper on a ShopStacks-powered storefront, direct your request to the storefront operator; we support our Builders in honoring these requests.
You can also control cookies through your browser settings and opt out of marketing emails via the unsubscribe link in any message.
The Service is for adults only. We do not knowingly collect personal information from anyone under eighteen (18). If we learn that we have, we will delete it and close the associated account.
We may update this Policy from time to time. Material changes will be announced via the Service or email before they take effect, and the effective date above will be updated. Your continued use of the Service after the effective date constitutes acceptance.
Questions or requests can be sent to privacy@shopstacks.com, or by mail to ShopStacks Inc., c/o Turtles.com Inc., 251 Little Falls Drive, Wilmington, DE 19808, USA.