Privacy Policy

1. Introduction

Welcome to SelfApprove. We are committed to protecting your personal information and your right to privacy. This Privacy Policy governs the privacy policies and practices of our application, which is provided to merchants using the Shopify platform.

2. Information We Collect

Our app operates as a B2B order approval workflow tool for your Shopify store. To provide this service, we process the following information:

• Customer Data: We access names, email addresses, and Shopify Customer IDs to assign roles (Requesters and Approvers) and track who is submitting or approving orders.
• Order Data: We read draft orders, cart contents, product details, and prices to evaluate them against your custom approval rules.
• Store Data: Basic store identifiers and settings necessary to install and perform authentication required by Shopify.

Note: To prioritize security and keep your data within your control, almost all application-specific data (such as rules and requests) is stored directly within your Shopify merchant account using Shopify Metaobjects.

3. How We Use Your Information

The information we collect is strictly used to:

• Provide, operate, and maintain the functionality of the SelfApprove app (e.g., hiding checkout, initiating draft orders).
• Send necessary email notifications (such as approval requests, approvals, or rejections) to the relevant Requesters and Approvers.
• Respond to merchant customer service and technical support inquiries.

We do not sell, rent, or trade your data across different merchants or to external third parties for marketing purposes.

4. Data Storage and Retention

SelfApprove is built with a "Shopify-Native" architecture to ensure your data is as safe as possible.

• Our Database: We only store shop session information necessary for the app to function.
• Your Shopify Account: All other application data—including your custom Approval Rules, Approval Requests, and Items—are stored directly in your own Shopify merchant account via Shopify Metaobjects.

This means your sensitive business data stays within the Shopify ecosystem, under your direct control and ownership. In compliance with Shopify's requirements and global privacy laws (such as the GDPR and CCPA), if you uninstall our app, or if a merchant or a customer requests data deletion, we will ensure all relevant data is purged or anonymized within the mandatory compliance window.

5. Third-Party Service Providers

We may employ third-party companies and services (such as transactional email providers database hosting, and analytics infrastructure) to facilitate our application. These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

6. Security of Your Data

By storing the majority of our application data within your own Shopify Metaobjects, your information inherits the same bank-grade security and industry-leading compliance standards that protect your entire Shopify store.

We strive to use commercially acceptable means to protect the minimal session information we do store. However, please remember that no method of transmission over the Internet, or method of electronic storage, is 100% secure and we cannot guarantee its absolute security.

7. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this Privacy Policy and, if the changes are significant, by notifying the store administrator.

8. Contact Us

If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us.

Email: your-support-email@example.com