Privacy policy
Overview
Payship: Checkout Rules ("the App") helps Shopify merchants customize payment methods at checkout. This policy explains what we collect, why we collect it, and how we handle merchant and customer data when you install and use the App.
Information we collect
When you install the App, we may collect and store:
- Your shop domain and Shopify session credentials required to operate the embedded app.
- Payment customization rules you create (conditions, actions, and configuration).
- Subscription and plan status through Shopify Billing.
- App settings and activity logs for troubleshooting and support.
- Technical data such as timestamps related to rule sync and webhook delivery.
- Anonymous usage analytics on public marketing pages (Google Analytics and Meta Pixel) to understand traffic — not loaded inside the Shopify Admin app.
The App requests Shopify API scopes for payment and delivery customizations, plus read_customers and read_products so checkout Functions can evaluate customer and product conditions and so Function run logs include useful detail. Buyer checkout data used for rule matching is evaluated by Shopify at checkout inside payment and delivery customization Functions. We do not store buyer personal information beyond what is needed to run the App for your shop (rules, settings, and sync activity).
How we use information
- Provide, operate, and improve the App.
- Sync your checkout rules to Shopify checkout.
- Process subscriptions and enforce plan limits.
- Respond to support requests and diagnose technical issues.
- Comply with legal obligations and Shopify platform requirements.
Data sharing
We do not sell your data. We share information only with service providers that help us host and operate the App (for example, hosting and database providers), and with Shopify as required for the App to function. We may disclose information if required by law.
Data retention and deletion
We retain shop data while the App is installed. When you uninstall the App, we process Shopify's app/uninstalled and shop/redact webhooks to remove shop configuration, rules, and related records from our systems, subject to any legal retention requirements.
GDPR and privacy rights
We support Shopify mandatory compliance webhooks: customer data request, customer redact, and shop redact. Merchants can contact us to exercise privacy rights applicable in their jurisdiction.
Security
We use industry-standard measures to protect data in transit and at rest, including access controls and encrypted connections. No method of transmission over the Internet is 100% secure.
Contact
Questions about this policy: hello@11studio.agency