Privacy Policy

Effective date: August 5, 2026

This Privacy Policy describes how FullStack ("we", "us", or "our") collects, uses, and shares information when merchants install or use our Shopify app.

1. Information we collect

When you install and use the app, we may process:

• Shop information (for example, shop domain and shop name).
• Shopify session and authentication data (such as access token and granted scopes).
• Merchant account profile fields provided by Shopify (for example, email and locale), when available.
• App usage and configuration data needed to generate bundle links and app features.
• Limited order data, as described in section 2, to identify and tag orders that contain product bundles.

2. Customer and order data (protected customer data)

To provide bundle-tracking features, the app receives order-creation notifications from Shopify (the orders/create webhook) so it can identify orders that contain product bundles and add an order tag (for example, "FullStack Bundle") for the merchant's own organization and reporting.

For this purpose the app reads only bundle-related line-item properties (such as internal bundle and offer identifiers). It does not read, store, or share customer names, email addresses, phone numbers, or postal addresses. Order notifications are processed in memory solely to apply the tag and are not retained. We process only the minimum data required to provide this feature and use it only for the purpose described here.

3. How we use information

• To provide and maintain app functionality.
• To identify orders that contain product bundles and tag them for the merchant's organization and reporting.
• To authenticate your shop and secure app access.
• To respond to support requests and troubleshoot issues.
• To comply with legal and Shopify platform requirements.

4. Data sharing

We do not sell merchant or customer personal information. We may share information only with service providers that help us operate the app (for example, hosting and infrastructure providers), and only to the extent needed to provide the service.

5. Data retention

We retain data only for as long as necessary to operate the app, comply with legal obligations, resolve disputes, and enforce agreements. Order notifications used for bundle tagging are processed in memory and are not stored.

6. Shopify mandatory compliance webhooks

We implement Shopify mandatory compliance webhooks, including customers/data_request , customers/redact , and shop/redact , and process requests in accordance with applicable law and Shopify requirements.

7. Security

We use reasonable administrative, technical, and organizational measures to protect information. Data is encrypted in transit (HTTPS/TLS) and at rest. No method of transmission or storage is 100% secure.

8. International transfers

Your information may be processed in countries other than your own, where data protection laws may differ.

9. Your rights

Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict use of personal information. You can contact us using the details below.

10. Contact

If you have any privacy questions or requests, contact:
rathore90@hotmail.com

11. Changes to this policy

We may update this Privacy Policy from time to time. Updates are effective when posted on this page.