Options RescuePrivacy policy
This policy covers the Options Rescue app: what it stores when a merchant installs it on a Shopify store, why it needs each piece, and how long it keeps it. Every item named below has a table or an API call behind it.
Who we are
Options Rescue is operated by Apitide. Write to kontakt@apitide.dev with anything on this page.
What the app stores
Shop credentials. The offline access token Shopify issues at install, the shop domain, the granted scopes and the token expiry. Without these the app cannot talk to the store's Admin API.
The merchant's rules. The names of the fields an order has to carry, the wording the buyer is asked, and the product a rule is limited to. No customer data is involved.
Missing detail records. When an order arrives without one of those fields, the app records the shop domain, the order id and order name (for example #1042), the line item id, the product id and the name of the field that is missing.
What the buyer types, briefly. The sentence a buyer supplies (the engraving, the name, the date) is held against the order id only until it has been written onto the order, which normally takes a second. It is never held against a customer, and the record is cleared 30 days after the order at the latest.
What the app does not store
No customer names. No email addresses, phone numbers, shipping or billing addresses, or payment details. The app never asks the buyer for any of those, and none of them are read from the order.
The app requests read_orders because the line item properties on an order are the only place it can see which detail is missing, and write_orders because the buyer's answer has to end up on the buyer's own order. Nothing else in the payload is written down.
Storefront and checkout behaviour
The form the buyer sees is a Shopify checkout UI extension, served by Shopify. It sends the order id, the order's confirmation number and the text the buyer typed to this app, and nothing else. It sets no cookies and runs no analytics or tracking.
The confirmation number is what proves the request belongs to that order: a request without it is refused, so one buyer cannot reach another's order.
How long data is kept
A buyer's text is cleared as soon as it is on the order, and in every case within 30 days. Missing detail records and rules are deleted when the app is uninstalled, along with the shop's credentials. Uninstalling removes everything the app holds about a store.
Shopify's mandatory privacy webhooks
customers/data_request: the app holds no customer personal data. What it holds for the orders named in the request is already visible to the merchant inside the app, so the request is acknowledged and logged.customers/redact: the records for the orders named in the request are deleted.shop/redact: the shop's records, rules and stored credentials are deleted.
Where data is stored, and security
Data is stored in Cloudflare D1, encrypted at rest by the platform and in transit over TLS. Access to the production environment is limited to the operator.
Sub-processors
- Shopify: the platform the app runs on, and the source of the order data it reads.
- Cloudflare: hosting and database.
Nothing is sold or shared with anyone else, and none of it trains a machine learning model.
Your choices
Uninstalling the app deletes everything left for that store. Questions and data requests go to kontakt@apitide.dev.
Changes
If this policy changes materially, the new version is published at this address and the date above changes with it.