Privacy Policy

1. Information We Collect

Through Shopify's APIs

We access certain store and order data through Shopify's APIs based on the permissions you grant during installation. This may include:

• Store name and domain
• Order details (order ID, status, payment status, line items, tags)
• Product information (titles, tags, variants)
• Fulfillment status

Directly from merchants

• Email address (for support and account communication)
• App settings and preferences you configure within the app

From merchants' customers

We do not collect personal information directly from your customers. Any customer data we process (such as order details) is accessed through Shopify's APIs on your behalf and used solely to provide the app's functionality.

2. How We Use Your Information

We use the information we collect to:

• Provide and operate the app's core features
• Process actions you or your customers initiate through the app (such as order cancellations, refunds, or reorders)
• Display analytics and reporting within the app dashboard
• Communicate with you about your account, support requests, and app updates
• Improve our apps and develop new features

We do not sell, rent, or share your data with third parties for their marketing purposes.

3. Data Storage and Security

• Your app settings and event data are stored in secure databases hosted by our infrastructure providers
• Data is transmitted over encrypted connections (HTTPS/TLS)
• We implement reasonable technical and organizational measures to protect your data against unauthorized access, loss, or alteration
• Our servers may be located outside your country of residence, including in the United States. By using our apps, you consent to the transfer and processing of data in these locations

4. Data Retention

• We retain your data for as long as your app is installed and your account is active
• When you uninstall the app, we retain a minimal record (store domain, plan, uninstall date) for analytics and support purposes. All other data associated with your store is deleted within 30 days of uninstallation
• Aggregated, anonymized data that cannot identify you or your customers may be retained indefinitely

5. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the data we hold about you
• Correction: Request that we correct inaccurate data
• Deletion: Request that we delete your data
• Restriction: Request that we restrict processing of your data
• Portability: Request your data in a portable format
• Objection: Object to our processing of your data

To exercise any of these rights, contact us at the email address below. We will respond within 30 days.

6. GDPR Compliance

For users in the European Economic Area (EEA), United Kingdom, or Switzerland:

• We process personal data as a data processor on behalf of the merchant (the data controller)
• Our legal basis for processing is the performance of the contract between us and the merchant (providing the app's functionality)
• We implement Shopify's mandatory privacy webhooks (customer data request, customer data erasure, shop data erasure) to handle data subject requests
• If you believe we have not adequately addressed your data protection concerns, you have the right to lodge a complaint with your local data protection authority

7. CCPA Compliance

For users in California:

• We do not sell personal information as defined by the California Consumer Privacy Act (CCPA)
• California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information

To make a request, contact us at the email address below.

8. Cookies and Tracking

Our apps operate within the Shopify admin and storefront environment. We do not place independent cookies or tracking technologies on merchant stores. Any session management is handled through Shopify's authentication system.

9. Third-Party Services

We may use the following third-party services to operate our apps:

• Shopify: Platform provider (governed by Shopify's own privacy policy)
• Infrastructure providers: For hosting and database services
• Crisp: For in-app live chat support (if enabled)

Each third-party service has its own privacy policy governing its use of data.

10. Children's Privacy

Our apps are business tools intended for use by Shopify merchants. We do not knowingly collect data from children under 16.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes by posting a notice within the app or sending an email to your registered address. Continued use of our apps after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this privacy policy or want to exercise your data rights:

Easy Apps Studio
Email: [email protected]
Website: tinkererslabs.com