Privacy policy

Texan Wholesale ("we", "us") is a wholesale supplier trading from 2635 Mossrock, Ste 101, San Antonio, TX 78230. We are the controller of the information described here.

For anything in this policy, contact us at privacy@texanwholesale.com.

We sell to businesses, not to the public. The people whose information we hold are the owners and staff of our trade customers, and our own staff. We do not knowingly collect information from anyone under 18, and we have no consumer accounts.

Everything we hold, you gave us or generated by using the account:

• Your business. Business name, contact name, phone number, business type and tax ID, plus the addresses you save for delivery.
• Your login. Email address and a password. We never store the password itself — only an Argon2id hash of it, which cannot be reversed back into your password.
• Your orders. What you put in your cart, the orders you place, the quantities and prices at the time, any notes you add, the delivery or pickup day and window you choose, and the invoices raised against those orders.
• Your profile picture, if you upload one.
• Notifications. Whether you want email and push messages, and — if you use the mobile app — a push token identifying the device so we can send to it.
• Security and audit records. Sign-in attempts, active sessions, and a log of significant actions on your account. These records include the IP address and browser or device the action came from, because that is what makes them useful if an account is misused.

We do not take payment through this system, so we hold no card numbers or bank details. [CONFIRM: how customers actually pay, and whether any payment data reaches us]

• To run your account. Verifying that you are a trading business, showing you your prices, taking your orders and raising your invoices.
• To tell you what is happening. Order confirmations, status changes and account notices, by email and — if you turn them on — push.
• To keep the account secure. Detecting misuse, rate-limiting sign-in attempts, and investigating anything that looks wrong.
• To meet our obligations. Keeping the sales and tax records a business is required to keep.

We do not sell your information, and we do not share it for anyone else's advertising.

We use a small number of service providers to run the system. They process information on our instructions and for no other purpose:

• Neon — hosts the database the account lives in.
• Render — hosts the application itself.
• ImageKit — stores and serves product and profile images.
• Resend — sends our transactional email.
• Expo — delivers push notifications to the mobile app, where you have enabled them.

We may also share information where the law requires it, or with professional advisers where necessary. [CONFIRM: any accountant, delivery contractor or other partner who sees customer data]

Our providers store data in the United States. [CONFIRM: the hosting regions actually configured, and whether any provider processes data outside the US]

We keep your account information for as long as the account is open. When an account is closed we remove the personal details from it and keep the order and invoice records, which we are required to retain for tax and accounting purposes — see deleting your account for exactly what goes and what stays.

[CONFIRM: retention periods — how long closed-account records, audit logs and security logs are kept]

• Traffic between you and us is encrypted in transit.
• Passwords are stored only as Argon2id hashes.
• Sessions use short-lived tokens that rotate, and a reused token invalidates the session.
• Access to customer records inside our team is limited by role, and significant actions are logged.

• See and correct your details. Your business details and addresses are in your account. Some verified fields are changed by us on request, so that they stay accurate.
• Turn notifications off. Email and push preferences are in your account settings.
• Close your account. See deleting your account.
• Ask us a question or make a complaint. Write to privacy@texanwholesale.com and we will respond.

[CONFIRM: which privacy laws apply to this business — a Texas wholesaler may fall under the Texas Data Privacy and Security Act, or be exempt as a small business, and B2B contact data is treated differently again. This section must be set by counsel.]

We use cookies only to keep you signed in and to remember which part of the site your account belongs to. We do not use advertising cookies, and we do not run third-party analytics on the customer-facing site.

If we change this policy we will update the date at the top, and tell you by email if the change materially affects you.