Privacy policy

Draft for legal review. Effective effective date.

Checkout X-Ray ("the app") is a Shopify app that shows merchants how Shopify prices a cart and checks saved test carts for price changes. This policy explains what the app processes when a merchant installs it, why, and for how long.

Who we are

The app is provided by legal name, address, registration number registration number ("we"). Contact: contact email.

For the merchant's own account data (the store's name and contact email, settings), we are the controller. For data we process on the merchant's behalf to provide the app, we are the merchant's processor under our Data processing agreement.

What the app processes

From Shopify, when the merchant installs and uses the app:

• the store's domain, ID, name, contact email and timezone;
• discount settings, products and prices, shipping zones and rates, and markets, which the app reads to calculate and explain prices;
• the store's refunds from the last 60 days (amounts, refunded items, the reason staff typed, the payment method type, restocking fees from returns, the order number and the order's customer ID), which the app reads to show Refund Watch;
• an access token for the store, stored encrypted (AES-256-GCM).

What the merchant enters:

• test carts: products, quantities, discount codes and a test address (country, region, city, postal code; no name, email or phone);
• the address that receives alert emails.

What the app produces: the price of each test cart over time, what changed, and store changes (for example "a discount was edited") received from Shopify as webhooks.

Customer data: carts are calculated as guest carts with the test address the merchant typed. When the merchant chooses to price a test cart as one of the store's customers, the app stores that customer's Shopify ID and a label from their tags and order count, to re-check the cart as them. It never reads or stores customers' names, email addresses, phone numbers or addresses. For Refund Watch the app keeps, with each refund, the Shopify ID of the order's customer, never their name, email address, phone number or address. When Shopify asks the app to erase a customer's data, the test carts priced as that customer and the refunds on their orders are deleted.

Technical data: server logs (time, request path, store domain, errors) and error reports. They contain no customer data; access tokens, cookies and URL query strings are removed.

Why, and on what basis

• To provide the app (simulations, test carts, checks and alert emails): performance of our contract with the merchant (GDPR Art. 6(1)(b)).
• To keep the app secure and working (logs, error reports): our legitimate interest in running a reliable service (GDPR Art. 6(1)(f)).
• Billing is handled by Shopify; we only read which plan a store is on.

Who else processes it

We use these service providers (sub-processors), each under a data processing agreement:

• Railway (hosting and database), region hosting region;
• Zoho ZeptoMail (Zoho Corporation; sending alert emails);
• Sentry (error reports), region sentry region;
• Axiom (server logs), region axiom region.

Where a provider processes data outside the EEA, transfers rely on the European Commission's Standard Contractual Clauses or an adequacy decision. We don't sell data or share it for advertising.

How long we keep it

• Price checks: 90 days, except each test cart's expected result, its latest result and the results its recorded changes compare.
• Store changes received from Shopify: 90 days.
• Refunds read for Refund Watch: 90 days.
• When the app is uninstalled, the access token is deleted at once, and everything else 48 hours later, when Shopify sends the shop deletion request.
• Logs and error reports: log retention.

Security

Connections use TLS. Access tokens are encrypted at rest. Access to production systems is limited to us. Logs and error reports are stripped of secrets and query strings.

Your rights

Under the GDPR you may ask for access to, correction or deletion of your personal data, restrict or object to its processing, and receive it in a portable format. Write to contact email. You may also complain to a supervisory authority; in Slovenia, the Information Commissioner (Informacijski pooblaščenec, ip-rs.si).

Changes

We'll post changes on this page and update the date above. Material changes are announced in the app.