Privacy Policy

Last updated October 16, 2026

Buymate is a wholesale buying companion for Shopify retailers, operated by JGX Solutions (Los Angeles, California). This policy explains what we collect when you use Buymate at buymate.net and app.buymate.net, why, and what you can do about it.

The short version

• Your buying data is yours. What you received from vendors, what you logged in your ledger and what sold belong to your store. Disconnecting a vendor does not delete them.
• We do not store your customers’ personal information. No customer names, emails, addresses or phone numbers.
• Vendors see only that you are connected and the orders they already have with you — never your sell-through, margins, other vendors, or how you rank them.
• We do not sell data and we are not a marketplace.

What we collect

From you

• Your Shopify store domain, store name and time zone (so that “this month” means your month) and, if you install the app, an access token Shopify issues for the permissions listed below. Tokens are stored encrypted.
• Purchases you type into your ledger (product, supplier, cost, quantity, retail price, date).
• The monthly buying budget you set, overall or for a supplier.
• The season you set for a style in “What sells”, when the vendor’s season or the delivery date put it in the wrong one. It changes only your store’s view; the vendor never sees it.
• Invoices or packing lists you import for a supplier that is not on Buymate (style number, description, color, size, quantity, unit cost, order number, date). An Excel file is read in your browser and only its rows are sent to us. We keep the rows, not the file, and we never contact that supplier. You can remove an invoice you imported, in the app under Vendors → Received.
• If you use “Ask to connect” for a supplier, the supplier’s name you typed and whether you allowed us to mention your store. We use it to decide which vendors to invite to Buymate. Unless you allowed it, the vendor is told only that retailers asked, never which ones; your orders and figures are never part of it.
• Your answers when Buymate asks whether a product in your store is the same item as one from a vendor, and what you do with a recommendation (reorder, dismiss).
• Your email address, if you join the waitlist or contact us.

From Shopify, with your permission

Buymate requests three permissions: write_products (to create draft products from what you received), read_orders and read_inventory (to know what sold and what is left).

• From orders and refunds we keep line-level sales facts only: order number, product and variant identifiers, SKU, quantity, price, discount, sales channel (online or point of sale) and date.
• Before anything from Shopify is stored, customer fields — names, emails, addresses, phone numbers — are removed. The remaining raw event is deleted 30 days after it has been processed.
• Product and inventory data: titles, options, SKUs, and stock levels.

From vendors you connect

When you connect a vendor (with a connect code or an invitation link from them), their system sends Buymate the orders, shipments and invoices they already have with you, and their catalog. We tell the vendor that your account is connected. We do not send them your sales, your other vendors, or your margins.

Automatically

• Cookies that keep you signed in, one that carries a vendor’s invite or a rep’s connect code through the Shopify install (for ten minutes, then deleted), and one that remembers which link brought you to buymate.net (for example a campaign name), so we know which channels work. It stays on our own site for 90 days and is not sent to any advertising platform. We use no advertising or cross-site tracking cookies.
• Server logs with IP address and request path, kept for security and troubleshooting.
• Product events such as “invite opened” or “order placed”, without prices or customer information.

How we use it

• To show you what you received next to what sold, and to work out which styles to reorder, watch or stop buying.
• To send a draft reorder to a vendor when you ask us to. Prices are set by the vendor; Buymate does not send prices.
• To keep a record of each recommendation and what followed, so we can show you how our recommendations performed.
• To secure the service, fix problems and answer support requests.

Who we share it with

• Vendors you connect: the fact that you are connected, and draft orders you send them.
• Service providers: DigitalOcean (hosting and database, United States) and Shopify (the platform the app runs in).
• Legal: when the law requires it.

We do not sell personal information and we do not share it for advertising.

How long we keep it

• Raw Shopify events: 30 days after processing.
• Your ledger, receipts and recommendation history: until you delete them or close your account.
• If you uninstall the app, we stop receiving data immediately. When Shopify sends its shop-redaction request, 48 hours after uninstall, we delete the store and everything in it: your ledger, received orders, product links, budget and recommendation history, not only what came from Shopify. Reinstalling within those 48 hours picks up where you left off. If you want to keep your records, download them first (Purchases → Your records).
• Backups are kept for up to 14 days.

Your choices

• Download your records yourself, at any time and on any plan: in the app, Purchases → Your records gives you what you received, your ledger and your product links as spreadsheet files. The history of our recommendations downloads the same way on Growth; on Free and Essentials, ask us for it by email.
• Delete: email info@fx5.app from the address on your store and we will delete your data within 30 days. The same address will send you a full export if you would rather not download it yourself.
• Disconnect a vendor at any time in the app. Your received orders stay in your store’s ledger.
• Uninstall from your Shopify admin at any time.
• Depending on where you live (for example California or the European Economic Area), you may have rights to access, correct, delete or restrict the use of your personal information. We honour these requests wherever you are.

Security

Connections are encrypted in transit. Access tokens and vendor credentials are encrypted at rest. Access to production is limited to the operating team.

Children

Buymate is a business tool and is not directed to children under 16.

Changes

If we change this policy in a way that matters, we will say so in the app before the change takes effect.

Contact

JGX Solutions · Los Angeles, California · info@fx5.app