Privacy Policy

Effective Date: March 3, 2026

This Privacy Policy describes how the SaaS application (the “App”) is owned and operated by David Wright (the “App Operator”), a sole proprietor based in California, United States, and how personal information is collected, used, disclosed, and processed when merchants (“Customers”) install or use the App in connection with a Shopify-supported store.

By installing or using the App, you acknowledge that you have read and understand this Privacy Policy.

1. Personal Information the App Collects

A. Information from Shopify

When you install the App, the App Operator is able to access certain information from your Shopify account, including:

• Orders, which may contain personal information of your store’s customers (such as names, shipping addresses, and order details).
• The billing address of your store.

The App operator also collects personal information about you and individuals who access the App on behalf of your store, including:

• Name
• Business name
• Mailing address
• Email address
• Phone number
• Billing information

This information is collected for account administration, billing, support, and communication purposes.

B. Information You Provide

You may provide additional information directly, including:

• Name, Business name, and Contact details (Mailing address, Email, Phone).
• Billing information.
• Information contained in custom label designs created by you.

C. Automatically Collected Information & Cookies

We automatically collect certain information through standard technologies:

• Log Files: This may include IP addresses, browser types, and usage performance data.
• Session Cookies: The App uses "session cookies" to function correctly. These are small text files that allow the App to recognize your browser and maintain your active session (for example, keeping you logged in as you navigate between pages). These cookies are temporary and expire automatically when you close your browser or after a period of inactivity. They do not track your activity across non-App websites.

2. How Personal Information Is Used

The App Operator uses personal information to:

• Provide, operate, and maintain the Service.
• Generate mailing labels and related outputs.
• Process billing and subscriptions.
• Communicate with Customers and provide support.
• Improve, optimize, and secure the App.

The App Operator does not sell or share personal information as those terms are defined under applicable privacy laws, including California law.

3. Roles and Responsibilities (Controller and Processor)

Merchant Customer Data (Shopify Order Data)

With respect to personal information contained in a Customer’s store orders:

• The Customer is the data controller.
• The App Operator acts as a data processor, processing such data solely on behalf of the Customer.

Merchant Account and Business Contact Data

With respect to personal information collected directly from Customers for account registration and billing:

• The App Operator acts as the data controller.

4. Shopify Mandatory Webhooks and Data Requests

The App complies with Shopify's data protection requirements. As a Merchant, if you receive a request from a customer regarding their personal data, the App assists in the following ways:

• Customer Data Request: Upon request via the Shopify admin, the App will provide the personal data stored by the App regarding that specific customer.
• Customer Data Deletion: If a customer requests their data be deleted, the App will purge all associated personal data from its records upon receipt of the mandatory webhook from Shopify.
• Shop Deletion: Within 48 hours of a Merchant uninstalling the App, the App Operator will initiate the deletion of all personal data associated with that store, unless retention is required by law.

5. Legal Basis for Processing (GDPR)

If you are located in the EEA, UK, or Switzerland, the App Operator relies on Contractual Necessity, Legitimate Interests, Legal Obligations, and Consent where required.

6. International Data Transfers

The App Operator is based in the United States. Where required, transfers of personal data from the EEA, UK, or Switzerland are subject to appropriate safeguards, including the European Commission’s Standard Contractual Clauses (SCCs).

7. Sharing of Personal Information

Personal information may be shared with trusted service providers (Subprocessors) solely for operating the App, including:

• Cloud Hosting: To store and process data securely.
• Payment Processors: To manage subscriptions.
• Error Monitoring: To ensure App stability.

A current list of subprocessors is available in our Data Processing Addendum or upon request.

8. California Privacy Rights (CCPA/CPRA)

California residents have rights to access, delete, and correct their data. The App Operator does not sell or share personal information. Contact: [email protected].

9. Rights of Individuals in the EEA, UK, and Switzerland

You have the right to access, correct, delete, or object to the processing of your data. Contact: [email protected].

10. Data Retention

Personal data is retained only for as long as necessary to provide the Service or comply with legal obligations. Merchant customer data is generally purged in accordance with Shopify’s deletion webhooks or upon termination of the subscription.

11. Data Security and Technical Safeguards

The App Operator implements industry-standard administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit (TLS) and access controls.

While the App Operator maintains regular backups to prevent data loss, no method of electronic storage is 100% secure. The App Operator cannot guarantee absolute immunity from unforeseen cyber-attacks or hardware failures but commits to notifying affected parties in the event of a confirmed breach.

12. Data Storage Disclaimer

The App is a productivity tool, not an archiving service. Customers are encouraged to maintain independent backups of their order history. The App Operator will not intentionally delete active Customer Data prior to the end of a subscription but is not liable for data corruption beyond our reasonable control.

13. Children’s Privacy & Do Not Track

The App is not directed to individuals under 16 and does not respond to "Do Not Track" browser signals.

14. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect operational, legal, or regulatory changes.

15. Contact Information

David Wright, App Operator
1950 W Corporate Way, Ste 28690, Anaheim, CA 92801, United States
Email: [email protected]