Mongoose Commerce / LabsPrivacy Policy
What we collect from merchants
Account: your email address and a password verifier. Your password is stretched in your browser before it is sent, and we store only a further-stretched value, never the password itself. Store content: the store names, descriptions, prices, photos (links, or files you upload), checkout links and optional contact email you enter. Anything you mark as part of a published store is public by design.
Billing: subscriptions are handled by Stripe. We keep the Stripe customer and subscription identifiers, not your card details.
Pro with your Mongoose Card: if you buy a Pro pass with your Mongoose Card, the charge is made by Mongoose on mongooselabs.app. We keep a record of each pass (what it was, its price in credits, when it started and ends); your Mongoose Card history holds the charge itself. The pass records are in your data download and are deleted with your account.
Technical: a session cookie that keeps you signed in, and short-lived rate-limiting counters keyed by network address to prevent abuse.
Selling with checkout: if you connect Stripe, you create (or use) your own Stripe account through Stripe’s onboarding; Stripe collects the business and identity details it needs, not us. We keep your Stripe account identifier and whether it can take payments.
What we collect from shoppers
Storefront pages are ordinary web pages. We do not run analytics scripts or load third-party scripts on them. The only cookie a storefront sets is the shopping cart (which products and how many, and the campaign link you arrived from, if any), kept in your browser for up to 30 days. To show sellers how their store is doing, the server counts page views, product views and Buy-button clicks per store per day, and groups where a visit came from into broad sources (such as search engines or social sites). These are plain counters: we do not store IP addresses, user agents or any per-visitor record, and we do not build profiles or follow anyone between stores. Visits from known crawlers, link previews and the store owner themselves are not counted. Our hosting provider (Cloudflare) processes standard request data such as IP address and user agent to serve and protect the site. Some products link to the merchant’s own outside checkout; clicking one takes the shopper to that provider, and we see nothing of that purchase.
Buying through a store’s checkout. When a store has connected Stripe, shoppers pay on a Stripe checkout page. Card details go to Stripe and never to us or the merchant. After payment, Stripe tells us the order details the merchant needs to fulfil it: the buyer’s name, email address, phone number (for shipped items), shipping address, what was bought, and the amounts (items, discount, shipping, tax, total), plus whether the buyer ticked the box to receive marketing from that store. We store these as the store’s order and customer records and show them only to that merchant. We send the buyer’s receipt, shipping and refund emails on the merchant’s behalf. For this information the merchant is responsible for how it is used (they are the seller); we process it for them to run their store.
Store newsletters. If you sign up to a store’s newsletter, we store your email address for that store and send you one confirmation email; you are only subscribed once you click it. Marketing emails from a store always include an unsubscribe link, and unsubscribing takes effect immediately. Buying something never subscribes you on its own.
Order links. Receipt emails contain a private link to the order’s status page. Anyone with the link can see that order, so do not share it.
If someone submits a “Report this store” form we store the report text, the optional contact email they give, and a one-way hash of their network address (never the address itself) to limit repeated abuse.
AI tools
When you use “Write with AI”, the store builder or the promo writer, the text you typed (a product name and notes, a description of your shop, or a product’s own title, description and price) is sent to the Mongoose AI service to generate the draft. The coach plan is built only from computed numbers about your store, not from text you wrote. Do not put personal data or secrets in text you send to an AI tool. AI output is a draft: you are responsible for what your store says.
Uploaded photos
Photos you upload are stored in our storage service and shown on your published store, so they are public once a product that uses them is live. Hidden location and camera data (EXIF) is removed from JPEG photos before they are stored. You can delete a photo at any time, and deleting your account deletes every photo you uploaded.
Automated review of stores
To keep shoppers safe, published stores are reviewed automatically and regularly, including by an AI model. The reviewer is shown the store name, tagline, about text, and each product’s title, description, price and the payment site its Buy button uses. It is not shown your email address, account details, or the full checkout links. Text submitted through “Report this store” is never sent to the AI model. We also check, about once a day, that each Buy link still works and still leads to a payment provider. Decisions and their reasons are recorded, and a person can review and reverse them.
Signing in with Mongoose ID (optional)
If you choose “Continue with Mongoose,” you approve the connection on mongooselabs.app. Commerce then receives a random identifier that is unique to Commerce, your Mongoose account’s email address, and the permissions you approved. If you approve it, a summary of your store numbers (products live, store visits and Buy clicks over the last 30 days) is shown in your Mongoose wallet, and Mongoose agents you choose can work in Commerce on your behalf; they can never sign in, delete your account or change billing. Commerce never receives your Mongoose password, and accounts are never linked by email address alone. You can disconnect Commerce from your Mongoose account’s Connected apps, and deleting your Commerce account disconnects it too.
Outreach
A store's outreach. Pro merchants can add the business contacts they want to reach (name, email, company, notes) and send them personal emails from the merchant's own domain. For that information the merchant is responsible; we store it for them, send the emails they schedule, and record opt-outs so that address is never emailed by that store again. If you received such an email, the opt-out link at its bottom takes effect immediately, or reply to the sender.
Mongoose Labs' own outreach. We occasionally send a one-time business introduction from mongooselabs.app to merchants and partners we think Mongoose Commerce would help, using publicly available business contact details. We keep the name, email, company and whether we wrote to them. Every such email has an opt-out that takes effect immediately and permanently; you can also ask us to delete your details at the address above.
Sending domains. A merchant who connects their own domain has it registered with our email provider (Resend) so their email can come from it; we keep the domain name and its verification status.
Partner Desk
Invited partners have a separate private workspace. We store the partner company's name, contact name and email, invitation and session token hashes, and the introductions they submit: the referred business, contact name and email, product interest, context, their confirmation that the contact agreed to an introduction, and our team's review stage and timestamps. The private invitation secret appears once and is removed from the browser address bar when opened; we store only its hash. A partner sees only their own introductions. Mongoose Labs administrators see all of them. Claiming an invitation sets a secure, HTTP-only partner session cookie for up to 30 days. Partners can sign out and administrators can revoke access.
Submitting an introduction does not send an email or automatically create a merchant account. We do not use Partner Desk stages as a payment or commission ledger. Partners should enter contact information only with that person's agreement. To request access, correction, export or deletion of Partner Desk data, contact us through Mongoose Labs; the merchant account's self-serve export/deletion does not cover this separate workspace.
Store imports
“Move your Shopify or WooCommerce store” reads the public product catalog at the address you give (the same information anyone visiting that store can see) and copies it into your store. Product photos stay linked to where they were until you replace them.
Services we use
Cloudflare (hosting, database and file storage), Stripe (payments for merchants who connect it, and our own subscription billing), Resend (sending email) and the Mongoose AI service (the AI tools). Each receives only what it needs for its part.
How we use it
To run your account and your storefront, to process and email about orders, to send the emails a store asks us to send, to bill you, to prevent abuse and to review reports. We do not sell anyone’s data, and we do not use shoppers’ details for our own marketing.
How long we keep it
Orders and customer records stay for as long as the merchant keeps their store (merchants often need them for tax records). The text of emails we sent is deleted after 30 days; a record of who was sent what kind of email, and when, stays with the store. Checkouts that were started but never paid are deleted after 30 days.
Your choices
You can download a copy of everything Mongoose Commerce holds for your account at any time from your account page (“Download all my data”): your stores, products and their options, orders, customers, discount codes, campaigns, a log of emails sent, your stores’ analytics, moderation results, reports about your stores (without the reporter’s contact details), links to your photos and AI usage, as one JSON file. Orders and customers can also be downloaded as spreadsheets from the Orders and Customers tabs.
You can delete your account at any time from your account page. Deletion cancels billing and permanently removes your stores, products, orders, customer records, discount codes, campaigns, email records, uploaded photos, analytics counters and sessions. It does not delete your own Stripe account, which is yours and keeps its own payment records. Reports about a deleted store are removed with it.
Shoppers: to see, correct or delete what a store holds about you, contact that store (its email is on its store page and in your receipt), or write to us at the address above and we will pass your request on and help the merchant act on it. You can unsubscribe from any store’s emails with the link at the bottom of each one.
Contact
Questions about this policy: use the contact details on mongooselabs.app.