Timastra Commerce
Timastra Commerce — Privacy policy
The Timastra Commerce merchant companion for orders and products.
Effective and last updated: 11 September 2026.
Who provides this app
Timastra Commerce is provided under the Timastra brand. Timastra LLC is the planned legal entity; its formation and the transfer of app operations to it are pending. This policy will be updated when that transition is complete. Privacy questions can be sent to support@timastra.com.
This policy covers the app and the features described below. Platform-specific features apply only where supported.
Merchant and order information
The merchant app connects to the configured Commerce service to process merchant identity, product details and photos, customer contact and delivery information, orders, payment status and fulfilment actions. Authorized staff use these records to operate the store, reconcile cash on delivery and assist customers. Product photos are uploaded only when selected using the camera or photo picker.
Device storage and notifications
Session credentials use secure storage. The app keeps local preferences, cached responses and queued offline operations to support reconnection. Where Firebase notifications are configured, Firebase Cloud Messaging and the service process device registration tokens and notification metadata; messages may reveal order information on the lock screen. Hosting, payment, delivery and messaging providers receive information required for their configured functions. The merchant is responsible for its customer-facing store policy.
Retention and deletion
Contact support with the merchant/workspace and account email to request access, correction or deletion. Customer requests should identify the merchant and order reference so the responsible business can respond. Order, invoice, refund and audit records can require retention after contact details are removed; final retention periods and backup expiry have not been published. Signing out or uninstalling removes local access/data but does not delete hosted store records or cancel services.
View deletion instructions and request help.
Support messages and your privacy choices
If you contact us, we receive your email address, message and any attachments you choose to send. We use them to respond, troubleshoot and handle privacy requests. Email and hosting providers process these communications and ordinary connection information. We retain correspondence as needed to resolve the request and meet applicable recordkeeping obligations; you may request deletion of correspondence.
You may request access, correction, export or deletion of personal information we hold, or raise an objection or withdraw consent where applicable. Local-only records must be managed on your device because we do not hold a remote copy. Optional device permissions can be revoked in system settings. Service providers may process data outside your country under their own policies; security also depends on your device and any destinations you choose for exports.
Contact and policy changes
Email support@timastra.com for Timastra Commerce privacy questions. Include the app name and enough non-sensitive information to identify your request. Never send passwords, authentication codes, recovery keys or private health, financial or photo backups. We may need to verify ownership before releasing or deleting hosted records.
Material changes to the app's data practices will be reflected in this policy with an updated date and in the app where appropriate. Visiting this page is also covered by our website privacy policy.