Last updated: July 21, 2026
THREEROX (“THREEROX”, “we”, “us”) is a service operated by Ayusya Enterprises, a sole proprietorship based in India, which is the data controller for the purposes of this policy. THREEROX provides immersive 3D showrooms that merchants embed into their online stores. This policy explains what data we handle when a merchant connects a store and uses the service, and the choices available to them. It covers the THREEROX web app and the THREEROX Shopify app.
Our direct customers are merchants who create a THREEROX account and connect their store. This policy describes the data we handle about merchants and their stores. We do not build profiles of the shoppers who visit a merchant's showroom — see “Shopper data” below.
Account data. When you sign up we collect your email address and, if you use Google sign-in, your name and Google account identifier.
Store connection. When you connect a store we store its domain and an access token issued by your commerce platform (e.g. Shopify). Tokens are held encrypted on our servers and are used only to sync your catalog and operate the showroom.
Catalog data. We sync product information from your store — titles, descriptions, prices, images, variants and inventory — so your showroom stays in step with your catalog.
Order attribution data. To calculate commission on the pay-per-sale plan, we receive order events for orders placed through the showroom. We record the order identifier, order name, the line items tagged as showroom-driven, the subtotal and currency. We do not store shopper names, email addresses, shipping addresses, or payment details.
Showroom analytics. We collect aggregate, non-identifying usage signals from your showroom — view counts, session duration and which products are opened — so we can show you how your showroom performs.
THREEROX is not designed to collect personal data about the shoppers who browse a merchant's showroom. Add-to-cart and checkout happen inside the merchant's own store; payment, shipping and shopper identity stay with the merchant and their commerce platform, and never reach us. The only shopper-related data we receive is the anonymized order-attribution data described above, used solely to bill commission.
We do not sell your data, and we do not use it for advertising.
We share data with a small set of processors strictly to run the service:
Each processes data only on our instructions and under its own security commitments.
We keep your data while your account is active. If you uninstall the THREEROX app from your store, or your commerce platform sends us a shop-redaction request, we delete the synced catalog, stored credentials, order attribution records and queued events for that store, and unlink the store. You can also request deletion of your account at any time by emailing us.
Where your store runs on Shopify, we honor Shopify's mandatory privacy webhooks (customers/data_request, customers/redact, shop/redact). Because we store no shopper personal data, customer-redaction requests are logged and require no erasure on our side; shop-redaction deletes the store data described above.
Access tokens are encrypted at rest and all data in transit is protected with TLS. Access to production data is limited to what is needed to operate the service. No system is perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data we hold.
THREEROX and its service providers may process data in countries other than yours, including the United States and the European Union. Where required, we rely on appropriate safeguards for such transfers.
We use only the cookies needed to keep you signed in and to operate the app. We do not use advertising or cross-site tracking cookies.
Depending on where you are, you may have rights to access, correct, export or delete your data, and to object to certain processing. To exercise any of these, email us and we will respond within the timeframe required by applicable law.
We may update this policy as the service evolves. Material changes will be reflected in the “last updated” date above, and where appropriate we will notify you by email.