Data security and DPA requests
Merchants and their IT teams often ask how our apps handle data. This page states what we can share and how to ask for more. The full legal text is in the Privacy Policy.
What data the app uses
Section titled “What data the app uses”The app stores your store name and store email address to apply your configuration. Other data is processed only when you use the related feature:
- Registration form: the customer’s email and phone number. Passwords are used during registration and are not stored in our database.
- Manual Orders: customer name and email, used to create draft orders in Shopify Admin.
- VAT validation: the VAT number a customer enters, used to check tax status.
We do not sell personal data.
Where data is stored
Section titled “Where data is stored”Data is stored on servers managed by Linode in the United States. Files that customers upload through the registration form are stored on Amazon S3.
How long we keep data
Section titled “How long we keep data”About 30 days after you uninstall the app, we delete customer data and registration form entries and remove the store owner’s contact details from our systems. Your rule settings may be kept in case you reinstall. You can also ask us in writing to delete your data (see privacy rights).
How we protect data
Section titled “How we protect data”- We use industry-standard security measures to prevent unauthorized access, disclosure or misuse of your data.
- Passwords entered on the registration form are not stored in our database.
No method of online transmission or storage is 100% secure, so we cannot guarantee absolute security.
Request a DPA or send a security questionnaire
Section titled “Request a DPA or send a security questionnaire”Email [email protected] or open Live Chat. Include:
- Your store domain.
- The legal name of your company.
- The privacy law that applies to you, for example GDPR or UK GDPR.
- Your questionnaire or list of questions, if you have one.
Our support team handles the request.
Your privacy rights
Section titled “Your privacy rights”To ask for a copy of your data, a correction or a deletion, contact us through Live Chat or [email protected]. The rights that apply under GDPR and CCPA are listed in the Privacy Policy.