Privacy policy

This policy explains what the app collects, why, and how long it is kept. Highlighted fields must be completed before publishing.

Who we are

The app is operated by LEGAL ENTITY NAME, registered in COUNTRY, at REGISTERED ADDRESS. For any privacy question, contact SUPPORT EMAIL.

What the app accesses

When you install the app it requests Shopify permissions to read and write the data it needs:

Customers — to match quote requests to a customer and apply price lists by tag.
Products and variants — to list products on a quote and read list prices.
Draft orders and orders — to turn an accepted quote into a draft order.
Companies and company locations — to run the B2B company portal.
Online store — to serve the quote drawer and quote pages on your storefront.

What the app stores

To provide the service, the app stores:

Your shop domain, plan and app settings.
Quotes and their line items: products, SKUs, quantities, list and quoted prices, costs where you provide them, discounts, payment terms and expiry.
Buyer details submitted with a quote request: name, email address, phone number, company name, PO number and any message.
Acceptance records: the name typed by the buyer, the date and time, and the IP address the acceptance was sent from. This exists so you have evidence of what was agreed.
Files uploaded to a quote by you or the buyer.

The app does not collect or store payment card details. Payment is handled by Shopify checkout.

Why we process it

We process this data to provide the app to you under our agreement with you, and because we have a legitimate interest in operating and securing the service. Where you are in the EU or UK, you are the controller of your buyers’ personal data and we act as your processor.

Who we share it with

Shopify — the platform the app runs on.
Hosting — HOSTING PROVIDER, with data stored in HOSTING REGION.
Email delivery — EMAIL PROVIDER, to send quote and notification emails.
Klaviyo — only if you enable the Klaviyo integration yourself.

We do not sell personal data, and we do not use it to train machine learning models.

How long we keep it

Quote and buyer data is kept while the app is installed. If you uninstall, the data is deleted after RETENTION PERIOD. You can ask us to delete it sooner by writing to SUPPORT EMAIL.

We also honour Shopify’s mandatory privacy webhooks: customers/data_request, customers/redact and shop/redact.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to its processing. Write to SUPPORT EMAIL and we will respond within the period required by law. If a buyer contacts us directly about data held for your shop, we will refer them to you as the controller.

Our representative in the EU and UK is EU/UK REPRESENTATIVE, OR 'not applicable'.

Security

Data is transmitted over TLS and access to production systems is restricted to staff who need it. Quote links use a long random token rather than a guessable identifier.

Changes

If this policy changes materially we will update the date above and, where the change affects how your data is handled, notify you in the app.