Privacy Policy
Last updated: 26 October 2026
This privacy policy explains how square-consulting, trading as Softsquare, the company behind Storebridge, handles personal data. Storebridge connects WooCommerce stores to TikTok Shop so that products, stock, prices and orders stay in sync.
Who we are
square-consulting, trading as Softsquare (sole proprietorship), Populierenlaan 149, 1185 SJ Amstelveen, the Netherlands. Netherlands Chamber of Commerce (KvK) number 66273641. Contact for privacy questions: info@storebridge.eu
Our role
- For merchants (stores that use Storebridge), we are the controller of the data we need to provide our service: your account, billing and support data.
- For buyers who purchase from a merchant on TikTok Shop, we are a processor. We handle order data only on behalf of, and on the instructions of, the merchant you bought from. The merchant is responsible for that data, and their own privacy policy applies. Please contact the merchant for requests about your order data; if you contact us, we forward your request to them.
What data we process, why, and on what legal basis
| Data | Whose | Purpose | Legal basis | Kept for |
|---|---|---|---|---|
| Name, company name, VAT number, email address, store URL, plan and connection status | Merchants | Providing and supporting Storebridge | Performance of our contract with you | Duration of the contract + 30 days |
| WooCommerce and TikTok Shop access credentials (encrypted) | Merchants | Connecting your store to TikTok Shop | Performance of our contract with you | Deleted immediately when you disconnect |
| Billing details and invoices | Paying merchants | Checkout, invoicing and tax obligations (handled by Freemius, see below) | Performance of our contract with you; legal obligation | 7 years (Dutch tax law) |
| Support emails | Merchants | Answering your questions; service and security notices | Performance of our contract with you | 2 years after last contact |
| Name, shipping address, phone number, email address and message where provided, ordered items | Buyers on TikTok Shop | Creating and fulfilling the order in the merchant's store | Processing on the merchant's behalf | Not stored: Storebridge passes the order from TikTok Shop to the merchant's store and keeps only order numbers, statuses and totals, for as long as the merchant uses Storebridge |
| Technical error data (no personal data) | — | Keeping the service reliable | Our legitimate interest in a working service | Up to 90 days |
| Email address, store URL and markets entered on storebridge.eu, language and browser type | Visitors who join the early-access list | Telling you when Storebridge launches | Your consent (withdraw with the unsubscribe link in every email) | Until you unsubscribe, at most 24 months |
We never sell personal data, never use it for advertising or profiling, and never use buyer data for any purpose other than syncing the merchant's orders.
Our website
storebridge.eu sets no cookies and uses no analytics or tracking. Fonts and images are served from our own server, so visiting the site sends no data to third parties. The early-access form stores the data listed above; we do not store your IP address.
Who receives data
We use these service providers (subprocessors), all bound by a GDPR data processing agreement and all storing data in the European Union:
| Provider | Purpose | Location |
|---|---|---|
| Fly.io | Application hosting | Netherlands (Amsterdam), Germany (Frankfurt) |
| Supabase | Database | Germany (Frankfurt) |
| Upstash | Job queue (identifiers only) | Germany (Frankfurt) |
| Sentry | Error monitoring (no personal data) | Germany (EU region) |
| Resend | Service emails to merchants (email address and store name only) | Ireland (EU region) |
Paid plans are sold by Freemius, Inc. as reseller (merchant of record). When a merchant buys or activates a plan, Freemius receives their name, email address, billing details, site URL and licence and processes them under its own privacy policy (freemius.com/privacy), including in the United States. Storebridge only reads the merchant's plan from Freemius. Stores on the Free plan are not registered with Freemius.
Data is also exchanged with TikTok Shop and with the merchant's own WooCommerce store, because that is the service the merchant asked us to provide. Apart from the checkout with Freemius described above, we do not transfer personal data outside the European Economic Area.
When a merchant enters a VAT number during setup, we check it with the European Commission's VAT Information Exchange System (VIES). Only the country code and the VAT number are sent. We store the result (valid or not, and when it was checked) with the merchant's account.
How we protect data
All traffic is encrypted (HTTPS). Credentials are additionally encrypted at rest with AES-256-GCM. Access is limited to the team members whose role requires it, each with a personal account protected by multi-factor authentication. Our logs and error monitoring do not contain personal data. Details are in our Information Security Policy, available on request.
Your rights
You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to receive it in a portable format. Merchants can exercise these rights by emailing info@storebridge.eu; we respond within one month. Buyers should contact the merchant they bought from; we help the merchant answer within 10 business days.
You also have the right to lodge a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl).
When you stop using Storebridge
When a merchant disconnects (Settings → "Disconnect and delete data", or by uninstalling the plugin) or ends their contract, we delete their credentials immediately and all other data relating to that merchant within 30 days. Connecting the same store again within those 30 days keeps the mappings and settings. Raw TikTok notifications are deleted after 30 days and the audit log after 12 months. Only invoices are kept, for 7 years, because Dutch tax law requires it.
Changes to this policy
We review this policy at least once a year and whenever our processing changes. The date at the top shows the latest version. We notify merchants by email of material changes.