Privacy policy

What personal data do we collect?

About merchants: the store domain and name Shopify shares with the app, the staff names and email addresses the merchant adds, and the settings they choose. About a merchant's customers: the name, email address, phone number and item details a customer gives when a repair is booked, and any photos of the item the merchant attaches. About orders: the order, refund and draft-order identifiers, amounts and statuses that Shopify sends us, so a payment can be matched to a repair. Card numbers are never sent to or stored by the app; Shopify takes payments.

Why do we collect it, and what do we do with it?

We use this data to run the repair workflow for the merchant: to show tickets and status pages, to send the notifications the merchant has switched on, to match payments to repairs, and to answer support requests. We do not sell personal data, and we do not use it to build advertising profiles.

Email Notifications

Our App sends transactional emails to customers who submit service tickets. These emails include:

• Order confirmation when a ticket is created
• Status updates as the service progresses
• Payment receipt confirmations
• Completion notifications when service is finished

Customers receive these emails because they initiated the service request. We do not send marketing or promotional emails. Customers may opt out by contacting the merchant directly to be removed from the notification system.

Who do we share it with?

Cloudflare hosts the app and its database, file storage, job queues, caches and transactional email. Shopify is the source of the store data the app reads and the place where its orders and draft orders are written, on the merchant's behalf. Providers that a merchant switches on, such as an SMS provider or a custom email domain service, receive only the messages the merchant sends through them. If a merchant enables AI features, the text needed for each request goes to the model provider that serves it.

Where is it stored, and for how long?

The app runs on Cloudflare's network. Records are kept in Cloudflare D1, uploaded files in Cloudflare R2, and cached session data in Cloudflare KV. We keep a shop's data while the app is installed. Shopify sends a shop-deletion request 48 hours after an uninstall, and we delete that shop's data when it arrives. Shopify requires the deletion to be completed within 30 days.

Merchants can request earlier deletion by contacting us.

How do we keep it secure?

All connections use TLS. Every request and webhook from Shopify is checked against its signature in constant time before we act on it. Staff access to the internal console requires a named account and sign-in. If we confirm a personal data breach, we will tell the affected merchants without undue delay.

We implement bounce and complaint handling to maintain email reputation

What rights do individuals have, and how are they exercised?

A merchant is responsible for its customers' records and decides how they are used. A customer who wants to see, correct or delete their information should ask the merchant first. Merchants can also write to us, and we act on their instructions for the data we hold for them. Where the law gives you further rights, write to the privacy address below and we will answer within the time the law sets.

• Right to access your personal data
• Right to correct inaccurate data
• Right to request deletion of your data
• Right to data portability
• Right to restrict processing
• Right to object to processing

To exercise these rights, please contact us at the email address below.

Shopify Data Processing

Our App is built on the Shopify platform. We comply with Shopify's Partner Program Agreement and API Terms of Use. We subscribe to mandatory webhooks to handle data deletion requests from merchants as required by Shopify.

How do you contact us?

Send questions about this policy to the privacy address below. We read every message and reply as soon as we can.

How will we tell you about changes?

We update this policy when the app's data practices change, and the date at the top shows the latest version. For material changes we tell merchants by email before the change takes effect.