Effective August 28, 2026

Privacy notice

Summit National Holdings operates GO Storefronts as part of the Grade Optic portfolio and is responsible for the information described in this notice. Privacy requests may be sent to admin@gradeoptic.com.

Information we collect

The checkout and onboarding process may collect a business name, contact name, business email, website or social page, retail category, catalog size, Shopify store details, collaborator code, operational notes, brand direction, inventory exports, product images, consent records, policy versions, order status, and Stripe checkout references.

Card and bank details are entered on Stripe-hosted Checkout and are not collected or stored by GO Storefronts.

How information is used

Information is used to create and reconcile the order, verify payment, prevent duplicate fulfillment, provide the purchased storefront service, review and prepare catalog data, support migration, communicate about the project, provide launch support, maintain security, resolve disputes, and meet accounting or legal obligations.

Service providers

Information may be processed by service providers used to deliver the purchase, including Stripe for payment processing, Shopify for the Customer's storefront, OpenAI Sites and its infrastructure providers for hosting and storage, and other vendors the Customer separately approves for the project. These providers process information under their own terms and privacy commitments.

Marketing

Purchasing a storefront or requesting a preview does not by itself enroll a person in marketing. Marketing messages require separate consent and include an unsubscribe method.

Retention

Catalog uploads and product media are retained for up to 90 days after handoff or project closure unless continued retention is requested for active support.
Support records are retained for up to 24 months after the support relationship ends.
Transaction, agreement, consent, and accounting records are retained for up to seven years.
Security records may be retained as reasonably necessary to investigate abuse, protect the service, or satisfy legal obligations.

Customer choices and requests

Customers may request access, correction, export, or deletion of their information by emailing admin@gradeoptic.com. A request may require reasonable identity verification. Some information may be retained when required for accounting, fraud prevention, dispute handling, security, or legal compliance.

Security and data minimization

The onboarding workspace is not designed to collect passwords, private API keys, customer payment data, or unrelated personal information. Customers should use Shopify's approved collaborator-access process and should not place secrets in notes or uploads. Reasonable administrative and technical safeguards are used, but no online system can guarantee absolute security.

Updates

Material changes will be posted with a new effective date. The policy version accepted at checkout remains recorded with the purchase.