Privacy policy: DepositKit

What we store

For each store that installs the app: the shop domain, the app settings (enabled countries, amounts, language), the ids of the deposit product and its variants, and the access and refresh tokens Shopify issues to the app, with their granted scopes and expiry.

The app does not use staff (online) sessions, so it stores no staff names or emails.

For the monthly plan limit: for each month, the number of orders that contain a deposit line. We keep the order id only to avoid counting the same order twice.

What we do not store

We do not store or request customer names, emails, phone numbers, addresses or payment details. The app does not read customer data to work.

How data is used and shared

Data is used only to run the app: to add deposits at checkout, to show the admin pages and to apply the free plan limit. We do not sell it and do not share it with third parties, except the hosting provider that runs the app.

Retention and deletion

When you uninstall the app we delete the store's settings and access keys. Usage counts are kept until Shopify's shop data erasure request (48 hours after uninstall), when we delete everything that is left. Customer data requests and erasure requests are answered as 'no customer data held'.

Contact

Questions about this policy: support@depositkit.eu