Privacy policy

Data we store about your store

Your store's domain and the access token Shopify gives the app when you install it.

Your rules: their names, the product and collection IDs and tags they apply to, and the states and ZIP codes they cover. Also your settings: checkout messages, your setup checklist, your plan and whether you've confirmed a template's review box.

Totals per billing cycle and per state: how many checkouts were blocked and how many orders were tagged for review. ZIP-based blocks are counted under the label “ZIP”, never the ZIP code itself.

Technical records that keep the app reliable: the ID of an order waiting to be checked (deleted after 30 days) and the ID of each webhook received (deleted after 7 days). Neither identifies a buyer.

Buyer data the app reads and doesn't store

At checkout. The rule check is a Shopify Function that runs inside Shopify. It reads the shipping country, state, ZIP code and the products in the cart, and answers whether to block. None of this reaches our servers.

On new orders, on the Growth and Pro plans. The app reads the order's shipping country, state and ZIP code and its products, compares them with your rules, adds the tag “StopShip: review” if the order breaks one, and discards what it read.

When a checkout is blocked. A web pixel running in Shopify's checkout sends our server your store's domain and the state, or the label “ZIP”, so the app can count it. It doesn't send the ZIP code, the address or anything that identifies the buyer, and the count is approximate because buyers' privacy settings can stop it.

We never store buyers' names, emails, phone numbers, addresses, ZIP codes or IP addresses, and we keep no table of orders.

How we use it

Only to run the app: enforce your rules, count blocks, tag orders, apply your plan and answer support requests.

We don't sell or share your data, and we don't use it for advertising.

Where it's stored

On servers in the United States: the app runs on Fly.io and the database on Supabase. Operational alerts to our team are sent through Resend and contain no buyer data. Billing is handled entirely by Shopify.

How long we keep it

While the app is installed. When you uninstall it, we delete your access token right away and keep your rules and settings so a reinstall doesn't lose them, until Shopify sends its request to erase your store's data, typically about 48 hours later. Then we delete everything.

The “StopShip: review” tag is saved on your orders in Shopify, so it stays there after you uninstall. You can remove it from your Shopify admin.

Your rights

You can ask us for a copy of your data or to delete it at any time by writing to soporte@msantini.com. We also respond to Shopify's mandatory data requests: since we store no buyer data, requests about a specific buyer are answered with exactly that.

Changes

If this policy changes, we'll update the date at the top of this page.

Contact

MS Labs · soporte@msantini.com