Privacy policy

Fixitify Country Restrictions & Limitations helps Shopify merchants manage country-based availability and checkout limitations. This notice describes the data processed by this application.

Information we process

To operate the Shopify integration we process store domain, authorization tokens (encrypted at rest), merchant-configured restrictions, country and regional identifiers, Shopify product and collection identifiers, plan status, configuration, technical logs and action history. Staff ID identifiers may be recorded for accountability. The storefront app proxy receives a Shopify-signed storefront request with a merchant shop identifier. We do not request customers' names, email addresses, payment details or full street addresses to enforce checkout rules. The checkout validation executes on Shopify infrastructure using the rule configuration supplied by the merchant.

Purposes and legal basis

We process information to provide the requested service, secure accounts, prevent misuse, support merchants, record necessary operational events and meet legal requirements where applicable. The legal grounds may vary by jurisdiction and contractual relationship.

Data sharing and transfers

Data is exchanged with Shopify APIs and the hosting infrastructure used to operate this application. Shopify independently processes information according to its privacy terms. Hosting location, sub-processors and cross-border transfer arrangements must be confirmed before commercial publication.

Retention and deletion

Shopify app-uninstall requests disable our access to the merchant store and remove usable authorization credentials. When Shopify issues the mandatory shop-redaction webhook, the related merchant account, rules and attached records are removed. Essential technical logs and system backups may persist temporarily for security and backup recovery; their retention durations must be specified and configured before public launch.

Customer requests

The application doesn't maintain a customer profile database or store customer order history. Customer data-access or redaction requests received via Shopify's compliance webhooks are acknowledged; requests about information held by Shopify should be directed to the relevant merchant and Shopify.

Security

Access tokens are encrypted within the application database, API requests are authenticated using Shopify session tokens or signed webhook messages, and administration of deployments is access-controlled. No system can guarantee absolute security.

Contact

Contact the operator through our support page for privacy inquiries or deletion requests.

Pre-publication requirement: replace operator identity, contact details, hosting/sub-processor list, transfer bases and precise retention schedule with verified legal details. This is a product-facing draft, not legal approval.