Privacy Policy - PreOrder Now

PreOrder Now ("App", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you install and use our Shopify application.

1. Information We Collect

1.1 Store Information

When you install the App, we automatically receive from Shopify:

Store name and domain (e.g., your-store.myshopify.com)
Store owner email address
Shopify access tokens for API communication
Store locale, currency, and timezone settings

1.2 Product Information

To provide pre-order functionality, we access:

Product titles, IDs, and variant information
Product images (thumbnails for display in the App dashboard)
Product inventory and status information
Product metafields (we write pre-order configuration data)

1.3 Order Information

When orders are placed for pre-order products, we collect:

Order numbers and IDs
Line item details (product, variant, quantity)
Customer email address (for order notifications)
Customer name (for order identification)
Order status and fulfillment information

1.4 Merchant-Provided Information

Notification email addresses
Pre-order configuration settings (button text, delivery dates, email templates)
Billing plan selections

1.5 Automatically Collected Information

We do not use cookies, tracking pixels, or analytics within the App. We do not collect IP addresses, browser information, or device identifiers from merchants or their customers.

2. How We Use Your Information

Data	Purpose	Legal Basis
Store information	Authenticate your store, manage your account	Contract performance
Product information	Display products, write pre-order metafields	Contract performance
Order information	Track pre-orders, send notifications	Contract performance
Customer email/name	Send pre-order and fulfillment emails	Legitimate interest
Merchant email	Send new pre-order notifications	Consent

We do not use your information for advertising, profiling, selling to third parties, or training AI models.

3. How We Share Your Information

3.1 Service Providers

Shopify: Platform provider, processes payments and order data
Railway: Cloud hosting infrastructure provider
Resend: Transactional email delivery (if configured)

3.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

3.3 No Sale of Personal Data

We do not sell, rent, or trade personal information to third parties.

4. Data Storage and Security

Encryption in transit (TLS/HTTPS for all connections)
Encryption at rest (database-level encryption)
Shopify HMAC webhook verification
Input sanitization to prevent injection attacks
Session-based authentication via Shopify App Bridge
Shop-scoped data isolation
Rate limiting on API endpoints
No storage of payment information (handled by Shopify)

4.1 Breach Notification

In the event of a data breach, we will notify you and any applicable regulatory authority within 72 hours, as required by GDPR.

5. Data Retention

We retain data for as long as the App is installed. Upon uninstallation:

Pre-order configurations are immediately disabled
Session and authentication data is immediately deleted
Order data is retained for up to 30 days for GDPR compliance
After shop/redact webhook, all remaining data is permanently deleted

6. Your Rights

6.1 GDPR Rights (EEA)

Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent.

6.2 CCPA Rights (California)

Right to know, delete, opt-out of sale (we do not sell data), and non-discrimination.

6.3 PIPEDA Rights (Canada)

Access, accuracy challenge, and withdrawal of consent.

6.4 Exercising Your Rights

7. Customer Data

When a customer places a pre-order, we collect their email and name solely for pre-order management. We handle all Shopify GDPR webhooks for customer data requests and erasure.

As a merchant, you are the data controller for your customers' personal information.

8. Cookies and Tracking

The App does not set cookies on your storefront. The pre-order button operates without cookies, local storage, or client-side tracking.

9. Children's Privacy

The App is not directed at individuals under 16. We do not knowingly collect data from children.

10. International Transfers

Data may be transferred to and processed in countries other than your own with appropriate safeguards in place.

11. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the App dashboard.

12. Contact Us

Email: preordernowapp@gmail.com