Privacy Policy

Eclipse Storefronts is a product of Eclipse Fulfillment [[LEGAL ENTITY NAME & STRUCTURE — confirm with Paul, e.g. "Eclipse Fulfillment" sole proprietorship vs. a registered LLC/Inc.]] ("Eclipse," "we," "us"). This policy explains what information we collect when you sign up for and use Eclipse Storefronts to build and host your own storefront, why we collect it, and who we share it with.

What we collect

We collect two kinds of information:

• Your account information — your email address, a hashed password (we never store your password in readable form), and basic profile details you give us.
• Your store & business information— your store name, domain, layout/design choices, product catalog selections, and connection status for your own payment (Stripe/PayPal) and supplier (CJ Dropshipping/AppScenic) accounts. We do not store your payment account credentials or your customers' card numbers — those are handled directly by the processors you connect.

We do not act as the merchant of record for your store, and we do not take a cut of your sales or custody your funds — you connect and own your own payment and supplier accounts.

Why we collect it

• To create and secure your account and let you log back in.
• To build, host, and operate the storefront you design.
• To bill your subscription and send you account, billing, and product-usage notices.
• To provide support when you ask for it.
• To keep the platform secure and meet legal obligations.

Who we share it with

We don't sell your information. We share the minimum needed with the service providers ("subprocessors") that help us run the platform:

• CheckoutChamp— processes your Eclipse Storefronts subscription billing (not your store's customer sales).
• SendGrid — sends transactional email on our behalf (magic links, account, billing, and usage notices) from support@eclipsefulfillment.com.
• Cloudflare — provides DNS, edge network, and hosting infrastructure so your storefront and our dashboard are fast and available.
• InMotion Hosting — hosts the servers that run our platform and your provisioned storefront.
• Twilio — sends SMS/voice verification codes, only if and when you enable phone/SMS verification on your account(not used today).
• CJ Dropshipping / AppScenic — your chosen supplier partner, which receives the order details needed to fulfill orders you initiate from your store.

We may also share information if required by law, or to protect the rights, safety, and security of Eclipse, our users, or the public.

Your storefront's shopper mailing list

Your storefront can invite shoppers to "follow" the store and receive your emails. When a shopper opts in, they check a consent box and we store their email address for you, along with a record of the consent they gave (the exact wording they agreed to, the version and time of that wording, and the IP address and browser it came from). This is a single opt-in based on the shopper's consent.

For this list, you (the store owner) are the data controller and Eclipse is your processor/host — the list is yours to use responsibly and lawfully. We use SendGrid as a subprocessor for our own emails; in this version we do not email your shoppers on your behalf — you export the list and email it from your own tool. A shopper can unsubscribe at any time using the link shown when they sign up, which removes them from your list and keeps them suppressed. If your store is deleted, its shopper mailing list is deleted with it.

Cookies

We use a single sign-in cookie, ec_session, to keep you logged in across our dashboard and the store builder. It is marked HttpOnly and Secure, and is scoped only to our own domain — it cannot be read by other websites, and we do not use third-party advertising or tracking cookies.

Your rights

You can ask us to access, correct, or delete your account information at any time by emailing support@eclipsefulfillment.com. We'll respond promptly. If you delete your account, we'll remove your store and account data within a reasonable time, except where we need to retain records for legal, billing, or fraud-prevention reasons.

We believe laws like the EU's GDPR and California's CCPA likely don't apply to our business today, but we handle your information responsibly and in the spirit of those protections regardless.

Data retention

We keep your account and store information for as long as your account is active, plus a reasonable period afterward for legal, billing, and security purposes, after which it is deleted or anonymized.

Security

We use industry-standard safeguards — hashed passwords, encrypted secrets storage, and HttpOnly/Secure session cookies — to protect your information. No system is perfectly secure, and we'll notify affected owners if we ever become aware of a breach involving your data.

Changes to this policy

We may update this policy as our platform evolves. We'll update the "Last updated" date above, and for material changes we'll let you know by email.

Contact us

Questions about this policy or your data? Email support@eclipsefulfillment.com.