Privacy Policy

1. Information We Collect

The App collects and processes the following information to enforce per-customer purchase limits:

• Store information: Store name and domain
• Limit rules: The products or variants, quantities, time windows, and guest-checkout policies configured by the merchant
• Order and customer data: For orders that include a limited product, the App processes the Shopify customer identifier, the products or variants purchased, quantities, and the order, refund, and cancellation events needed to keep a running per-customer total

The App does not collect customer names, email addresses, shipping addresses, or payment information. It stores only the purchase counts and the customer identifier required to apply your limits across separate orders.

2. How We Use Information

The collected information is used solely for the following purposes:

• Enforcing per-customer purchase limits at checkout, across every order a customer places
• Keeping each customer's running purchase total accurate as orders are placed, refunded, or cancelled
• Managing app subscription and billing

We do not use this information for advertising, profiling, or any purpose unrelated to enforcing the limits you configure.

3. Data Storage

Limit rules are stored as Shopify metafields on the merchant's store. Each customer's remaining allowance is stored in a Shopify customer metafield so it can be read at checkout. Purchase totals and the events used to compute them, along with session data for app authentication, are stored in the App's database hosted on secure cloud infrastructure (Google Cloud Run and a managed libSQL/Turso database).

4. Third-Party Sharing

We do not sell, share, or transfer any merchant or customer data to third parties. Data is processed only by the infrastructure providers used to operate the App (cloud hosting and database), and solely for the purpose of running the service.

5. Data Deletion

When the App is uninstalled, its session data is immediately deleted. The App also honors Shopify's mandatory data protection requests: when Shopify sends a customer data erasure or shop erasure request, the associated purchase records are deleted from the App's database. Metafield data stored on the Shopify store remains under the merchant's control and can be removed through the Shopify admin. To request data deletion, please contact us at the email below.

6. Security

We take the following measures to protect your data:

• All communications are encrypted via TLS/SSL
• Authentication tokens are securely stored
• The App follows Shopify's security best practices

7. Contact

For privacy-related inquiries, please contact us at:

Email: [email protected]