Privacy Policy

Welcome to Turtle ("we", "us", or "our"). We provide a premium Software-as-a-Service (SaaS) commerce platform allowing merchants to quickly construct online storefronts, manage products, synchronize WhatsApp order pipelines, and process global customer payments.

We hold your privacy in the highest regard. This Privacy Policy details how we collect, process, utilize, share, and protect information pertaining to merchants (our clients), customers of those merchants (end consumers), and visitors to our promotional domains.

By accessing or registering with Turtle, you explicitly agree to the collection and handling of data as described herein. If you disagree with any terms in this policy, you must cease use of our services immediately.

Depending on your interaction with the Turtle platform, we collect varying categories of operational and personal data:

We compile and handle collected information to fulfill operational demands, specifically:

• Core Service Provisioning: Hosting, generating, and maintaining fast, high-performance storefronts.
• Integrations: Routing checkout forms to WhatsApp nodes to facilitate chat-based commerce.
• Operational Analytics: Computing store statistics, visit counts, and conversion patterns to keep merchant dashboards accurate.
• Billing Support: Validating accounts, processing subscription cycles, and handling service alerts.
• Compliance & Protection: Safeguarding against fraudulent storefront listings, malicious access, and platform abuse.

We do not sell, rent, lease, or trade merchant or customer details to third-party advertising companies. Your business data belongs solely to you.

To deliver seamless operations, data is only shared with verified entities under strict constraints:

• Cloud Infrastructure: Cloud hosting, database managers, and performance pipelines (e.g., Supabase, Vercel).
• Legal Compliance: If required by binding subpoenas, court orders, or regulations to protect against platform abuse.
• Consent: At your explicit direction (e.g., when linking custom payment providers or CRM apps).

We implement robust, modern defenses. All traffic routes through encrypted TLS protocols, and store data rests in secure, firewall-protected database infrastructures.

No transmission medium is 100% secure. While we deploy strict controls, we cannot guarantee absolute security. Merchants are encouraged to safeguard their credentials and notify us immediately if unauthorized access is suspected.

We use cookies and similar tracking identifiers for specific, transparent operations:

• Authentication: Preserving logged-in sessions for merchant dashboards.
• Performance Optimization: Tracking static assets to optimize worldwide loading speeds.
• Analytics: Gathering anonymous layout navigation logs to improve website user experience.

You can configure cookie filters inside browser settings, although restricting cookies may limit access to specific administrative functions on our platform.

Depending on your jurisdiction (such as EEA under GDPR or California under CCPA/CPRA), you retain key legal privileges:

• Access & Portability: Obtain a detailed report of all personal profiles stored in our systems.
• Correction: Instantly update profile credentials directly in your dashboard interface.
• Erasure ("Right to be Forgotten"): Request complete erasure of your merchant profile, catalogs, and analytics records.
• Opt-Out: Unsubscribe from news alerts or product announcements via footer links.

We retain merchant details only as long as an account is active. Upon account deletion, we purge or anonymize merchant databases within 30 business days, excluding records required to comply with financial audits or legal obligations.

If you have clarifying questions, security inquiries, or require help enforcing access rights, please contact the Softrover Legal & Privacy Desk: