Privacy Policy

Checkster — Last updated: September 2, 2026

Checkster ("the App", "we", "us") is a Shopify application that hides checkout delivery and payment options when the cart matches rules you configure. This policy explains what data we handle, how we use it, and your rights.

1. Data We Collect

When you install and use Checkster, we store:

• Shop access token and session data — your shop domain, an API access token, and its scope, stored so the App can read and write your checkout customization settings on your behalf.
• Your rule configuration — the conditions and hide options you set up in the App (product IDs, tags, collection IDs, weight/subtotal thresholds, metafield namespaces/keys, and the delivery/payment option names you choose to hide). This is a settings blob you authored; it contains no end-customer personal information.

At checkout, the App's Shopify Functions evaluate your rules against the current cart (including, if your rules require it, whether the buyer is signed in, is a B2B/company buyer, or carries a given customer tag or metafield). This evaluation runs inside Shopify's checkout infrastructure. Checkster does not receive, log, or store any customer names, emails, phone numbers, addresses, or payment details.

2. How We Use Your Data

• To authenticate your store and manage your checkout customizations.
• To save your rule configuration and mirror it into the Shopify-owned metafield that the checkout Functions read.

3. Third-Party Services

The App is hosted on Vercel and stores data in a Neon (PostgreSQL) database. We do not sell or share your data with third parties for advertising.

4. Data Retention

• All session and rule-configuration data is permanently deleted within 48 hours of uninstall, in response to Shopify's shop/redact webhook.
• Because the App stores no customer personal data, the customers/data_request and customers/redact webhooks have nothing to return or erase; we acknowledge them per Shopify's requirements.

5. GDPR & Your Rights

We hold shop session tokens and your rule configuration only. To exercise any rights or request deletion, contact us below.

6. Security

All data is transmitted over HTTPS and access tokens are stored securely.

7. Changes to This Policy

We may update this policy from time to time. The "Last updated" date above reflects any changes.

8. Contact

For privacy questions or data requests, contact us at: support@themar2.com