Service privacy notice
TooFast Web LLC operates Toofast Catalog Connect. Contact plugins@toofastweb.com for service privacy questions and data requests. Effective date: October 18, 2026.
Data processed
When a merchant explicitly connects a store, the connector sends its store URL and connection key to the hosted service at wps.toofastweb.com. The service exchanges that key for a store-bound token. Authorized requests include that token and store URL. Account provisioning uses the merchant's email, store reference and license record.
Optional fitment jobs send supplier item IDs and cursors through Toofast to WPS. Shoppers' vehicle type, year, make and model choices are processed on the merchant site and are not sent to Toofast by this connector.
Entering a dealer API key sends it to Toofast for validation and encrypted storage. Catalog and inventory requests send supplier item identifiers, quantities, pagination cursors and selected pricing rules, brand/category selectors or ordering settings. The service processes the dealer's catalog, prices and availability. Local coupon safeguards and configured customer shipping controls run in the merchant's store.
Submitting a supplier order sends the merchant order reference, supplier items and quantities, and the delivery recipient's name, address, phone and email to Toofast and Western Power Sports for fulfillment. Tracking requests send the order reference and return supplier shipment information. The gateway's persistent reconciliation ledger keeps merchant and supplier order references, an order fingerprint and submission state rather than a full copy of the delivery address. The merchant's store and the supplier retain their own order records.
Other providers
Western Power Sports receives authorized dealer API requests through api.wps-inc.com and delivery data needed for dealer orders. Supplier images are downloaded from cdn.wpsstatic.com into the merchant's media library during authorized imports. See the Western Power Sports privacy policy.
Stripe receives billing email, store references, selected plan and payment details entered directly in its hosted checkout or billing portal. Toofast stores Stripe customer and subscription references, billing state, verified webhook events and installation requests. Full card details are not collected by the connector or gateway. See Stripe's privacy policy. The merchant's customer checkout uses that merchant's chosen payment provider, separately from Toofast subscription billing.
Purpose and safeguards
We process these records to authenticate stores, provide the requested catalog and fulfillment service, collect subscription payments, prevent duplicate supplier purchases, reconcile orders and respond to support requests. Dealer keys use authenticated encryption at rest. Gateway license keys and connection tokens are stored as hashes; the seller portal keeps an encrypted license mapping for the account owner. Credentials and request bodies are excluded from application error logs. Web servers and infrastructure may process network information such as IP addresses for delivery and operations.
Disconnecting, retention and requests
The plugin makes no service request before explicit connection consent. Use Disconnect in settings to revoke the token and request deletion of the stored dealer key. If the request cannot reach the service, local connection removal still occurs and the merchant is told that cloud deletion needs support confirmation. Uninstalling removes local tokens and settings while preserving the merchant's catalog and orders.
Subscription expiration does not automatically erase the service's billing or order-reconciliation history. Contact plugins@toofastweb.com to request access, correction, export or deletion of hosted records. We verify the account before acting and may need to retain records for billing, disputes or other applicable obligations. Supplier and Stripe records are managed by those providers. Disconnecting or uninstalling does not cancel a subscription; use the billing portal separately.
Merchants should include supplier fulfillment disclosures in their own customer privacy notices. The connector adds suggested wording to WordPress's privacy-policy guide for the merchant to review.