Privacy policy

Information used to operate the app

We store a merchant's Shopify domain and shop identifier, installation dates, permission scopes, encrypted authentication sessions, shipping rules and a short-lived subscription status record. Shopify authentication sessions may include merchant staff account information. We use these records to authenticate the installation, save settings, verify subscription access and respond to support requests.

The storefront code reads the cart's amount and currency in the buyer's browser. It sends the selected storefront country and currency to our app through Shopify's app proxy. It does not send the cart's contents or amount to our application server. Shopify may add proxy and installation identifiers to requests.

Buyer information

The app does not create buyer profiles or persist buyer IP addresses, cart tokens, delivery addresses, orders or payment details in its database. It uses Shopify's selected storefront country, rather than collecting browser location or looking up an IP address. We do not use advertising cookies, sell personal information or share it for targeted advertising.

Shopify and hosting providers process network metadata to deliver and secure requests. Privacy webhook payloads may contain customer identifiers; our app verifies these messages and discards their payloads without storing customer records.

Service providers and transfers

Shopify supplies platform, authentication and billing services. Our deployment uses: Render provides application hosting and managed PostgreSQL in Oregon, United States. Shopify provides platform and billing services.. Providers may process information in their operating countries under their applicable contracts. We use these services to deliver and secure the app.

Retention and removal

We retain installation settings while the app is installed. Uninstall processing deletes stored sessions and subscription snapshots and disables shipping offers. Shopify's subsequent shop erasure request deletes the installation and its configuration records. Backups expire within 7 days under the configured hosting retention policy. We use logs without request URLs, raw payloads or authentication tokens in the application server.

Contact us to request access, correction or deletion of information associated with your installation. We may verify the requester's authority before acting. Your local law may provide additional privacy rights or a right to complain to a supervisory authority.

Security and changes

Authentication session contents are encrypted before database storage. Access is restricted to the services needed to operate the app. No service can guarantee absolute security. We will update this page when our practices change and communicate material changes to affected merchants where required.