TPS Engagement Ring Builder — Shopify App

Privacy Policy

TransPacific Software Pvt. Ltd.·Effective date: July 13, 2026·Last updated: July 13, 2026

Contents

  1. Who We Are
  2. Scope of This Policy
  3. Information We Collect from Merchants
  4. Information We Process About Shoppers
  5. Diamond Supplier Integrations (RapNet & VDB)
  6. How We Use Information
  7. Cookies Local Storage
  8. How We Share Information
  9. Data Retention Deletion
  10. GDPR, CCPA Your Rights
  11. Data Security
  12. Children's Privacy
  13. Changes to This Policy
  14. Contact Us

01Who We Are

TPS Engagement Ring Builder ("the App") is developed and operated by TransPacific Software Pvt. Ltd. ("TransPacific," "we," "us," "our"), a software company based in Mumbai, India. The App enables Shopify merchants ("Merchants," "you") to offer a guided, three-step engagement ring customization experience — choose a setting, choose a certified diamond, and complete the ring — on their Shopify storefronts.

We are committed to protecting the privacy of Merchants who install the App and of the shoppers ("Shoppers") who use the ring builder on Merchant storefronts. This policy explains what information we collect, why we collect it, how it is used and shared, and the choices available to you.

02Scope of This Policy

This policy applies to information processed by the App when it is installed on a Shopify store, including data received through Shopify APIs, data generated by Shoppers using the ring builder on a Merchant's storefront, and data exchanged with connected diamond suppliers. It does not cover the Merchant's own privacy practices, the Shopify platform itself (governed by Shopify's Privacy Policy), or third-party websites linked from the App.

Merchants remain the data controller for their Shoppers' personal information; TransPacific acts as a data processor on the Merchant's behalf for that information.

03Information We Collect from Merchants

When you install the App, we receive and store certain information about your store through the Shopify APIs, subject to the permissions you approve at installation:

  • Store information: store name, myshopify.com domain, primary domain, store owner name, email address, store address, currency, timezone, and plan type.
  • Catalog data: products, variants, collections, images, and pricing needed to display ring settings and to create completed ring products. Finished rings are created via the Shopify Admin API and stored in a hidden collection within your catalog.
  • Theme data: access required to install and render the ring builder theme extension on your Online Store.
  • Configuration data: your App settings, including supplier connections, attribute mappings, markup and pricing rules, filter preferences, and display options.
  • Billing information: subscription charges are processed entirely through the Shopify Billing API. We never receive or store your credit card numbers or banking details.
  • Support communications: messages, attachments, and contact details you share when contacting us at connect@transpacific.in.

04Information We Process About Shoppers

When Shoppers use the ring builder on a Merchant's storefront, the App processes:

  • Ring configuration data: selected settings, diamond choices (shape, carat, color, clarity, cut, certification, natural or lab-grown, white or fancy color), metal options, ring size, and builder session progress. This data is not linked to a named individual by the App.
  • Technical data: browser type, device type, IP address (processed transiently for security and delivery), language, and pages viewed within the builder — used for performance, compatibility, and fraud prevention.
  • Order-related data: when a Shopper adds a completed ring to the cart and purchases it, the order is processed by Shopify under the Merchant's and Shopify's privacy policies. The App receives only the information necessary to associate the configured ring product with the order.
ImportantThe App does not require Shoppers to create an account, and does not collect Shopper names, email addresses, phone numbers, or payment details through the ring builder interface. Checkout and payment are handled entirely by Shopify.

05Diamond Supplier Integrations (RapNet & VDB)

The App integrates with third-party diamond inventory suppliers, including RapNet and VDB (Virtual Diamond Boutique), to display live certified diamond inventory — natural and lab-grown, white and fancy color — on your storefront.

What flows from suppliers to the App
  • Diamond inventory data: stone attributes (shape, carat, 4Cs), certification details (IGI/GIA report numbers), pricing, availability, images, and 360° video links.
What flows from the App to suppliers
  • Search and filter queries needed to retrieve matching inventory, and the Merchant's supplier API credentials used to authenticate those requests.
  • No Shopper personal information is transmitted to diamond suppliers. Queries are inventory lookups only.
Your supplier credentials

Merchants connect suppliers using their own RapNet or VDB API credentials. These credentials are stored encrypted and are used solely to retrieve inventory on your behalf. Your use of a supplier's data is also governed by your own agreement with that supplier; TransPacific is not a party to those agreements.

06How We Use Information

  • To provide, operate, and maintain the ring builder on your storefront;
  • To retrieve and display diamond inventory from your connected suppliers and apply your markup and mapping rules;
  • To create completed ring products in your catalog via the Shopify Admin API;
  • To provide multi-language and multi-currency display through Shopify Markets;
  • To respond to support requests and provide onboarding assistance;
  • To bill subscription fees through the Shopify Billing API;
  • To monitor performance, diagnose errors, and improve the App;
  • To comply with legal obligations and enforce our terms.

We do not sell, rent, or trade personal information, and we do not use Merchant or Shopper data for advertising.

07Cookies & Local Storage

The ring builder uses strictly necessary browser storage (such as session or local storage) to remember a Shopper's in-progress ring configuration — for example, the selected setting while they browse diamonds. This storage is functional, is not used for advertising or cross-site tracking, and expires with the session or shortly after.

The Merchant's storefront may set additional cookies under the Merchant's own cookie policy and consent tooling; those are outside the App's control.

08How We Share Information

We share information only in the following limited circumstances:

Recipient What is Shared Purpose
Shopify Product, collection, and theme data; billing events Core app functionality and subscription billing
RapNet / VDB Inventory search queries and your supplier credentials (never shopper personal data) Live diamond inventory retrieval
Hosting & Infrastructure Providers App data stored on secure cloud servers Operating the service under confidentiality obligations
Legal Authorities Information required by law Compliance with valid legal process and protection of rights and safety

All service providers are bound by contractual confidentiality and data-protection obligations and may use the data only to provide services to us.

09Data Retention & Deletion

  • While installed: we retain store configuration, mappings, and supplier connections for as long as the App is installed on your store.
  • After uninstall: upon receiving Shopify's shop/redact webhook, we permanently delete store data associated with your shop within 30 days, except records we must retain for legal, tax, or accounting purposes.
  • Shopper builder sessions: anonymous configuration sessions are retained only as long as needed for functionality and analytics, then deleted or aggregated.
  • Products created by the App: completed ring products and the hidden collection remain in your Shopify catalog under your control; you may edit or delete them at any time.

10GDPR, CCPA & Your Rights

We support the privacy rights available under the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and similar laws. Depending on your location, you may have the right to access, correct, delete, restrict, or port personal information, and to object to certain processing.

Shopify mandatory privacy webhooks

The App implements and honors all three of Shopify's mandatory privacy webhooks:

  • customers/data_request — when a Shopper requests their data through a Merchant, we provide any related data the App holds;
  • customers/redact — we delete data related to a specific Shopper upon request;
  • shop/redact — we delete all shop data after uninstallation, as described in Section 9.

Shoppers should direct privacy requests to the Merchant whose store they used; as the data controller, the Merchant will coordinate with us where needed. Merchants may contact us directly at connect@transpacific.in to exercise their rights. We respond to verified requests within the timeframes required by applicable law. We do not "sell" or "share" personal information as those terms are defined under the CCPA/CPRA.

11Data Security

We apply industry-standard safeguards to protect information, including encryption in transit (TLS/SSL) and at rest, encrypted storage of supplier API credentials, role-based access controls, and regular security reviews of our infrastructure. Payment card data is never handled by the App — all billing is processed by Shopify.

No method of transmission or storage is completely secure. If we become aware of a breach affecting your data, we will notify affected Merchants and relevant authorities as required by applicable law.

12Children's Privacy

The App is a business tool for Shopify merchants and is not directed to children. We do not knowingly collect personal information from anyone under 16 years of age (or the equivalent minimum age in your jurisdiction). If you believe a child has provided personal information through the App, please contact us and we will delete it promptly.

13Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the App, applicable law, or our practices. The "Last updated" date at the top of this page will always show the current version. For material changes, we will provide notice through the App admin or by email to the store owner. Continued use of the App after changes take effect constitutes acceptance of the updated policy.

14Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact:

Data Protection Contact TransPacific Software Pvt. Ltd.
325, 3rd Floor Platinum Techno Park, Navi Mumbai, Maharashtra 400703. India
Email: connect@transpacific.in