Security and data
How our Shopify apps handle your store's data, in plain English. For the full legal detail, see our privacy policy.
The short version
This page covers our Shopify apps. Easy DOC Builder, ArtworkDesk and FileYourOwn have their own privacy policies on their websites.
Only the access we need
Each app asks Shopify only for the access its features use.
Only the data each app needs
Ticklist, Notch and Handoff use only the order ID and number. Cue shows order details without keeping copies. Stub keeps the receipts it issues.
Hosted in the EU
Our apps run on servers in the EU, with data encrypted in transit.
Deleted when you uninstall
Shopify tells us 48 hours after you uninstall, and we delete your store's data.
What each app stores
Every app also keeps the name and email address of staff members who open it, with their sign-in session, so it can record who made each change.
| App | What it stores | Customer details |
|---|---|---|
| Ticklist: Order Checklist | Your checklist steps and tag settings. For each tick: the order ID and number, the step, the time and the staff member's name. | None. Uses only the order ID and number. |
| Notch: Order Fields | Your field settings. For each change: the order ID and number, the field, the value entered, the time and the staff member's name. | None read from Shopify. Field values are whatever your staff type in. |
| Handoff: Order Assignment | Your team list (names and email addresses). For each assignment: the order ID and number, the assignee, the time and who made the change. | None. Assignment emails include the order number only. |
| Cue: Order Workflow | Your stages and settings. For each order on the board: its current stage and history of moves, with the time and the staff member's name. | Products, options and personalisation are read from Shopify when shown, and not stored. |
| Stub: VAT Receipts | Your business details, VAT number and settings. A copy of each receipt and credit note it issues: order number, line items, shipping, VAT rates and totals. | Yes. Each receipt includes the customer's name and billing address, as a VAT receipt must. We hold these on your behalf. |
Our apps work inside your Shopify admin. On Cue's Pro plan, if you turn it on, your customer's order status page shows the order's current stage. Stub lets your customers download their receipts from their customer account. Neither sets cookies or collects anything else from the customer.
Stub's receipts are part of your VAT records. Because uninstalling deletes them, export them for your accountant first if you need to keep them.
How we protect it
- Our apps run on servers in the EU. Our website is hosted in the UK.
- Data is encrypted in transit (HTTPS/TLS), and access tokens and data at rest are encrypted where supported.
- Access is limited to the people who need it, and we keep our software up to date.
- We do not sell data, use store data for advertising, or combine one store's data with another's.
When you uninstall
An app loses access to your store as soon as you uninstall it. Shopify notifies us 48 hours later, and we delete all of your store's data from that app. This cannot be undone, so if you reinstall later you start again from scratch. Tags an app has already added stay on your orders, because they are part of your Shopify order data.
Customer privacy requests
Our apps respond to Shopify's privacy requests. When a customer asks you for their data, or asks for it to be erased, Shopify tells us and we act on it within 30 days.
Who else handles data
We use a small number of service providers, under contracts that require them to protect data and use it only on our instructions.
| Provider | What they do for us |
|---|---|
| Shopify | Hosts the stores our apps connect to, and handles app billing |
| Our app hosting provider | Runs our apps' servers, databases and backups, in the EU |
| Cloudflare | Website delivery, DNS and security |
| Featurebase | Our help centre, feedback board and support inbox |
| Brevo | Sends emails from our apps, such as Handoff's assignment emails and Cue's team emails |
| Twilio SendGrid | Sends emails from our support inbox |
| Google Workspace | Our business email |
How long we keep things
| Information | How long |
|---|---|
| Store data and settings held by an app | While the app is installed, then deleted after Shopify's deletion notice (48 hours after you uninstall) |
| Server, security and diagnostic logs | Up to 30 days |
| Backups | Overwritten on a rolling basis within 30 days |
| Support conversations | Up to 2 years after the last message |
| Invoices and accounting records | 6 years, as required by UK law |
Questions
For the full detail, read our privacy policy. For any privacy or security question, email [email protected] with "Privacy" in the subject line. Zieasoft Limited is registered with the Information Commissioner's Office under number ZB333436.