Privacy policy

Information used today

When you create an account, we process the email address you provide, your password through our authentication service, email verification and session information, and records needed to protect and support the account. If you begin merchant setup, we also process the store name, platform, public store domain, contact email, ownership or authorization status, and inventory information you submit or authorize the store to provide. If you request buyer agent access, we process your account identity, application status, and API key identifiers. We use these records to operate account and store setup, respond to support requests, and investigate security or service problems.

Account credentials and payments

The authentication service handles account passwords; we use a session cookie to keep you signed in. Agent API keys are shown once and stored as hashes. We do not ask you to enter full card numbers on this site. Stripe and Whop collect eligible deposits through hosted payment pages. We use payment references, quotes, reservation events, checkout records, refunds, and disputes to determine outcomes. x402 is planned for a later release. Do not send store credentials, card details, wallet recovery phrases, or private keys by email or support request.

Service providers and retention

Our application, account service, and database run on AWS infrastructure. We use Resend to send account email, and service logs help us protect accounts and investigate errors. If you authorize a Shopify or WooCommerce store connection, information needed to establish and maintain that connection is exchanged with that store platform. We do not sell personal information. Stripe or Whop receives information needed to process a payment when you use its hosted checkout.

Account and store records may remain while an account or connection is active. Security, support, and transaction records may need to be kept longer to investigate problems, resolve disputes, or meet legal obligations. We have not published fixed retention periods for these records. Contact us for information about a particular record or to request its removal; we will review what can be deleted and what must be retained.

Access and questions

To request access, correction, deletion, or information about privacy rights, email support@20and4hrs.com. We will verify account ownership before changing merchant or agent records. Some payment and accounting entries cannot be removed immediately when retention is required for an unresolved transaction or legal obligation.