Privacy Policy

Last Updated: October 2026

1. Data We Collect

We collect merchant registration details (email, workspace names) and storefront design metadata (JSON page schemas, theme settings, custom domain configurations).

2. Sensitive Payment Credentials

We never store buyer payment card numbers, CVVs, or bank details on our servers. When customers checkout, they are routed through Tebex's PCI-DSS compliant checkout gateways.

3. Credential Encryption at Rest

Merchant credentials such as webhook secrets are encrypted at rest using AES-256-GCM. Public API tokens are treated in accordance with Tebex Headless documentation.

4. Analytics & Cookies

Devpiq utilizes essential session cookies. If a merchant configures Google Analytics 4, telemetry is routed according to the merchant's configured consent rules.