Privacy policy

What the app stores

The app does not store a customer's name, email, phone, or address. An order row keeps a Shopify order id and the order name.

A Shopify session stores the shop staff member's name and email from that session. Floor staff rows store an email and a password stored as a one-way hash. Failed sign-ins store the IP address so the app can lock out repeated attempts.

The app also stores that shop's warehouse work: bins, receipts, picks, packs, shipments, holds, and inventory counts. Access tokens on the Shopify session are encrypted before they are written.

Customer privacy requests

When Shopify asks us to export or delete one customer's data, nothing is exported and nothing is deleted. The app does not store a customer's name, email, phone, or address.

When you uninstall

When you uninstall, the app marks the shop uninstalled, deletes floor sign-in sessions, and deletes the Shopify session rows. Those session rows held the staff name, email, and access token.

The shop's warehouse work stays until about 48 hours later, when Shopify asks us to erase the shop's data. That includes shop staff and floor staff rows (name, email, and the password stored as a one-way hash) and the failed-login counts stored for an email. That erase deletes the shop and those rows, plus leftover Shopify sessions, records of messages Shopify already sent, and the email lockout rows.

Failed sign-in addresses are kept for about 30 days after that sign-in window ends. They are not tied to the shop, so uninstalling does not delete them sooner.