Privacy policy

1. Who we are

Wishfo is a customer-data enrichment service operated by Trevbag LLC d/b/a Wishfo (“Wishfo,” “we,” “us,” or “our”) in the United States. This policy explains how we process information when merchants use our website, Shopify application, and related services.

Questions or privacy requests can be sent to privacy@wishfo.com.

2. Our role

For customer information submitted through a merchant’s store, Wishfo generally acts as a service provider or processor on the merchant’s behalf. The merchant determines why the information is processed and is responsible for its customer-facing notices, lawful basis, consent practices, and use of enriched information.

3. Information we process

Merchant and account information

We process store domain, application installation and authentication data, merchant settings, plan and credit activity, support communications, and operational logs.

Order and customer information

To provide enrichment, we may process the minimum information needed to identify an eligible record, including name, postal address, telephone number, existing email value or domain, Shopify customer and order identifiers, order date, and sales channel.

Enrichment and verification results

We process candidate email addresses, identity-match indicators, deliverability results, confidence information, destination status, and audit records. Sensitive matched values are encrypted at rest.

Website information

We may receive standard technical information such as IP address, device and browser type, referring page, and security or performance logs when someone visits our website.

4. How we use information

• Provide, operate, secure, and support the Wishfo service.
• Detect records eligible for merchant-requested enrichment.
• Perform identity matching through a multi-source waterfall.
• Independently verify candidate email deliverability.
• Send verified profiles to a merchant-authorized Klaviyo list.
• Administer credits, billing, audits, abuse prevention, and support.
• Comply with legal obligations and enforce our agreements.

Wishfo does not replace Shopify order or customer email fields. When a merchant enables the Klaviyo integration, Wishfo may carry an affirmative Shopify marketing-consent status into Klaviyo, but does not grant broader consent or reverse an existing Klaviyo opt-out or suppression. We do not use merchant customer data for Wishfo’s independent advertising, and we do not sell it for another party’s independent marketing.

5. Service providers and data sources

We use contracted infrastructure, security, billing, customer-data enrichment, and email-verification service providers. To improve coverage, enrichment requests may be sent sequentially to more than one provider until a suitable match is found. Each provider receives only the fields reasonably needed to perform its contracted task.

We may also disclose information when required by law, to protect rights and safety, or as part of a business transaction subject to appropriate safeguards.

6. Retention and deletion

Merchant-configurable retention settings apply to enrichment match data. Operational, billing, security, and audit records may be kept longer where necessary for accounting, fraud prevention, legal compliance, or dispute resolution. When a Shopify merchant uninstalls Wishfo, we remove customer match data in accordance with our deletion workflow and respond to Shopify’s mandatory privacy webhooks.

7. Security

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit, encryption of matched email data at rest, access controls, scoped credentials, audit logging, and data-minimization practices. No system can guarantee absolute security.

8. International processing

Wishfo and its service providers may process information in the United States and other countries. Where required, we use appropriate contractual or legal safeguards for cross-border data transfers.

9. Privacy rights and requests

Depending on location, individuals may have rights to access, correct, delete, restrict, or object to certain processing. Because we generally process customer information on a merchant’s behalf, customers should first contact the merchant with whom they transacted. Merchants and customers may also email privacy@wishfo.com. We may need to verify a request and coordinate with the relevant merchant.

10. Children

Wishfo is a business service and is not directed to children. We do not knowingly collect personal information directly from children through our website.

11. Changes to this policy

We may update this policy as our service or legal obligations change. We will post the updated version here and change the effective date. Material changes may also be communicated through the service or by email.