Privacy policy
This policy explains what personal data TCHENTCHEN LLC (“Tchentchen”, “we”) collects when you visit tchentchen.com, use a Tchentchen account on app.tchentchen.com, or pay in an online store that uses the Tchentchen checkout, what we do with it, and the choices you have.
In short: we collect what we need to run the service, we never sell personal data, the website has no tracking, and your card details go to Stripe, never to us.
1. Who we are
Tchentchen is run by TCHENTCHEN LLC, a limited liability company registered in Wyoming, United States. For any question about this policy or your data, write to privacy@tchentchen.com.
TCHENTCHEN LLC30 N Gould St Ste RSheridan, WY 82801United StatesOur role depends on who you are:
- Website visitors and merchants (the store owners who use Tchentchen): we decide how your data is used. We are the “controller”.
- Shoppers who pay in a store that uses Tchentchen: the store is responsible for your data and we process it on the store’s behalf to run the checkout. We are its “processor”.
- Payments are processed by Stripe, on the store’s own Stripe account. Stripe handles payment data under its own privacy policy.
2. Visiting tchentchen.com
Our website has no analytics, no advertising trackers and sets no cookies. Its fonts and images are served from our own site, so your browser does not contact third parties while you read it.
Like any website, it is delivered by a hosting provider (Vercel), which receives the technical data needed to send you the pages (your IP address, your browser and the page requested) and may keep it in server logs for a short time, for security.
3. Merchants: your Tchentchen account
What we collect
- Your account: your name, your email address, your password and whether your email is verified. We store the password only as a one-way hash: nobody, including us, can read it.
- Sign in with Google, if you use it: your name, email address and Google account ID. Google shares nothing else with us.
- Your answers when you sign up: your store’s name and web address, its platform, how you heard of us, and the other platforms you sell on.
- Your stores: their web addresses, the versions of their platform and of our plugin, and the settings you choose (offers, texts, after-payment behaviour).
- Your Stripe connection: your Stripe account ID and the credentials Stripe gives us to create checkouts on your account. These credentials and your plugin’s keys are encrypted (AES-256).
- Your messages when you write to us.
- Technical data: a sign-in cookie (see section 5) and security logs.
Why we use it
- To provide the service you signed up for: create your account and sign you in, connect your stores and Stripe, create checkouts, and show your orders and their payment details from your store and Stripe account (performance of our contract with you).
- To send you service emails: address verification, password reset, and important changes to the service or to these documents (contract, and our legitimate interest in keeping you informed).
- To keep the service secure, prevent abuse and fix problems (our legitimate interest).
- To understand who uses Tchentchen and improve it, from your sign-up answers (our legitimate interest).
- To meet our legal obligations.
We do not send you marketing emails unless you agree to receive them, and you can stop them at any time.
4. Shoppers: paying in a store that uses Tchentchen
When you pay in a store that uses the Tchentchen checkout:
- The store sends us your cart (products, quantities, prices, delivery options and taxes) and, if it has them, your email address and country.
- On the checkout, you enter your contact details, your delivery and billing addresses and, if the store asks for it, your phone number. We keep them as you type them, before you pay, so that the checkout can show them again and the store can help you finish your order.
- Your card and other payment details are typed into Stripe’s secure fields and go directly to Stripe. We never see or store your full card number.
- If the store turns this on, it sends us your IP address once, so that we can guess your country and show the right delivery options and taxes before you type an address. We look it up in memory and never store or log it. The lookup uses DB-IP’s IP to City Lite data, licensed under Creative Commons Attribution 4.0: IP Geolocation by DB-IP.
We use this data only to show you the checkout, calculate delivery and taxes with the store’s own rules, have Stripe process your payment on the store’s Stripe account, create your order in the store and, if the store offers it, help you finish your order by phone.
We keep the checkout record (cart, contact and delivery details, and payment status) for the store, as part of its order history. The checkout link itself stops working after 24 hours. The record is deleted when the store closes its Tchentchen account, or earlier if the store asks us to. Your order itself is kept by the store and on the store’s Stripe account.
One-click offers. So that you can accept an offer right after your purchase in one click, Stripe saves your payment method and creates a customer record on the store’s Stripe account. That data is controlled by the store, and your payment method is charged again only if you accept an offer.
Help to finish your order. If the store turns this on, the checkout offers the store’s phone number when you seem stuck, for example after a refused card or a long time on the page. To notice this, the checkout counts events on the page (errors, presses on Pay, refusals, time spent), never your keystrokes. When you call, the store’s staff can see your open checkout (your cart, the step you reached and these events) from the help code shown on your screen. Your email address and phone number stay partly hidden unless a member of staff needs them, and each time one is shown, their name is recorded. If you ask, the store can send you a link to your checkout, already filled in, from its own email or text message service. If the store is closed and you leave your number, the store sees it so that it can call you back. We keep these events for 30 days after your checkout ends, then delete them.
The store’s own tracking. If the store turns this option on, the receipt page loads the store’s order confirmation page in the background, so that the store’s own analytics or advertising tools record the purchase as they would on its own page. Those tools are chosen by the store and covered by the store’s privacy policy.
To use your rights over this data, contact the store you bought from: we help the store answer. You can also write to privacy@tchentchen.com.
7. International transfers
Tchentchen is a United States company, our application servers are in Morocco and our providers are in the United States and the European Union, so your data may be processed outside your country, including outside the European Economic Area and the United Kingdom. Where the law requires it, we rely on safeguards such as the European Commission’s Standard Contractual Clauses included in our providers’ data processing terms. Ask us at privacy@tchentchen.com for more details.
8. How long we keep data
- Your account: as long as it is open. When you close it or ask us to delete it, we delete your data within 30 days, except what the law requires us to keep.
- Checkout records: kept for the store as long as it uses Tchentchen, then deleted within 30 days after it closes its account.
- Security logs: as long as needed for security and troubleshooting, then deleted.
- Backups: kept for a limited time and replaced on a rolling basis.
- Your messages: as long as needed to answer you and follow up.
9. Your rights
Depending on where you live, you can:
- get a copy of your data, or receive it in a format you can reuse;
- have it corrected or deleted;
- object to some uses or ask us to limit them;
- withdraw a consent you gave, at any time.
To do so, write to privacy@tchentchen.com from the email address of your account. We answer within one month and may ask you to confirm your identity. If you are a shopper, contact the store first: it is responsible for your order data.
If you live in the European Union or the United Kingdom, you can also complain to your data protection authority (in France, the CNIL; in the United Kingdom, the ICO). If you live in California or another US state with a privacy law, you have the rights that law gives you; we do not sell or share personal information, and we will not treat you differently for using your rights.
10. Security
Every page is served over HTTPS. Passwords are stored as one-way hashes, Stripe and plugin credentials are encrypted, payment details never reach our servers, and access to data is limited to the people who need it to run the service. No system is perfectly secure: if a breach affects your data, we will tell you and the authorities as the law requires.
11. Children
Tchentchen accounts are for businesses and for people aged 18 or older. We do not knowingly collect data from children. Shoppers’ ages are a matter for the store they buy from.
12. Changes to this policy
When we update this policy, we change the date at the top of this page. If a change is important, we email account holders before it applies. The terms of service explain how the service itself works.
13. Contact
Privacy questions and requests: privacy@tchentchen.com. Anything else: support@tchentchen.com. By post: TCHENTCHEN LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States.