Privacy Policy

Gecko generally acts as a controller for merchant account data, Gecko's own billing and administration, website security, support, service improvement and Gecko's own marketing.

For shopper, customer and order data, the merchant decides why and how that data is used. In those cases the merchant is generally the controller and Gecko generally acts as a processor (or service provider) that processes the data to run the merchant's checkout. Our exact role depends on the specific processing activity. If you shopped at a Gecko-powered checkout, please contact that merchant first about your data.

Account data

Name, email address, sign-in and account metadata, and profile details.

Business data

Business name, store domain, integration and checkout configuration, and settings.

Shopper and checkout data

Customer name, email, shipping address, cart and order items, quantities, totals, currency, subscription information, payment status, provider/payment identifiers and order metadata.

Payment data

We may receive payment status, amount, currency, payment/membership/subscription identifiers and limited provider metadata. We do not intentionally store full card numbers, CVV codes or raw payment credentials.

Usage and security data

IP address where needed, device and browser information, logs, timestamps, security data, and coarse location (country/city derived from IP) used for checkout Live View.

Gecko AI inputs

Screenshots, prompts, product images, brand details and generation metadata you submit.

Support

Messages, emails and WhatsApp communications you choose to send us.

• providing the Service, authenticating users and rendering checkouts
• verifying transactions, syncing orders to Shopify and managing subscription records
• providing analytics and Live View to merchants
• Gecko software billing
• support, security, abuse prevention and diagnosing problems
• operating Gecko AI
• improving the Service
• meeting legal requirements
• sending service messages and, where permitted, marketing

• Contract — to provide the Service you signed up for.
• Legitimate interests — security, fraud prevention, diagnostics and improving the Service.
• Legal obligation — tax, accounting and regulatory duties.
• Consent — optional cookies and marketing technologies such as Meta Pixel on our website.

Shopper card details are entered into and handled by the merchant's connected payment provider, such as Whop and its payment infrastructure. Gecko receives only the information needed for the commerce workflow, such as whether a payment succeeded.

We plan to bill paid Gecko plans through Paddle as Merchant of Record. This is not live yet, so no billing details are currently sent to Paddle. When it goes live, Paddle will process your billing details under its own privacy notice and we will update this policy.

When you use Gecko AI, the screenshots, prompts, images and brand details you submit are sent to Lovable AI, the AI service Gecko uses, to generate checkout layouts, copy and images. Do not include other people's personal data in AI inputs unless you have a lawful basis to do so.

AI-generated testimonials, customer names and UGC-style images are synthetic draft content, not real customer data.

We share data with service providers that help us run Gecko (listed on our Subprocessors page), with integrations the merchant connects (such as Shopify, Whop and Meta), with professional advisers, and where required by law. We do not sell personal data.

Our providers may process data outside the UK and EEA, including in the United States. Where this happens we rely on appropriate safeguards such as adequacy regulations, the UK International Data Transfer Addendum or EU Standard Contractual Clauses offered by those providers.

We keep account and business data while your account is active and for a reasonable period afterwards for legal, tax, security and dispute purposes. Order and subscription records are kept while the merchant's account is active so the merchant can operate their store. We do not yet apply automatic deletion schedules; you can ask us to delete data at support@geckocheckout.com.

We use encrypted connections (HTTPS), authenticated access, per-merchant access controls in our database, server-side handling of payment-provider credentials and verification of payment webhooks. No system is perfectly secure, and we cannot guarantee absolute security.

You may have the right to access, correct, delete, restrict or object to processing of your data, to data portability, and to withdraw consent at any time. You can also complain to the UK Information Commissioner's Office (ico.org.uk) or your local supervisory authority.

Depending on where you live (for example California or other US states), you may have rights to know, access, correct or delete personal data and to opt out of targeted advertising. We honour requests wherever reasonably possible regardless of location. Contact support@geckocheckout.com.

We do not sell personal data for money. If you consent to marketing cookies, Meta Pixel on our website may share browsing information with Meta for advertising measurement, which some laws treat as "sharing". You can withdraw at any time using Cookie Settings in the footer.

Gecko is for businesses and users aged 18+. We do not knowingly collect data from children for Gecko accounts.

Screenshots, revenue figures, customer names, orders, UGC personas, reviews, notifications and analytics shown on our website may be illustrative or demonstration data and do not represent real people or real merchant results.

Email support@geckocheckout.com or write to Gecko Checkout, 1 Bestwick Close, Ilkeston, DE7 4QZ, United Kingdom.