Privacy Policy

Last updated: March 1, 2026

ShipCheck ("we", "our", "the App") is a Shopify application that helps merchants test and validate their shipping rate configurations. This Privacy Policy describes how we collect, use, and handle information when you install and use ShipCheck.

1. Information We Collect

Store Information

When you install ShipCheck, we receive your Shopify store domain and an access token to interact with your store on your behalf. This is required for the App to function.

Product Data

We access product and variant information (titles, IDs, prices) through the Shopify Admin API when you use the product picker to build test scenarios. This data is used only during your active session and is not stored beyond what you save in test suites.

Shipping Configuration

We read your shipping profiles, zones, and rate definitions through the Shopify Admin API to display your configuration and run shipping rate simulations.

Test Scenario Data

When you create and run test scenarios, we store the scenario parameters (test addresses, product selections, quantities) and simulation results (shipping rates returned, anomalies detected). Saved test suites are also stored for your convenience.

What We Do NOT Collect

• Real customer personal data — test addresses are merchant-provided test data
• Payment or financial information
• Customer browsing or purchase history
• Analytics or tracking data from your storefront

Shopify Flow Integration

If you use the Shopify Flow trigger, ShipCheck sends a summary of detected anomalies to Shopify Flow when a simulation completes. This includes the anomaly count, highest severity level, simulation URL, and store domain. This data is passed directly to Shopify Flow and is not stored separately by ShipCheck.

2. How We Use Information

We use the collected information solely to:

• Authenticate your store and manage your session
• Run shipping rate simulations using your configured rates
• Detect anomalies in your shipping configuration
• Store your test suites and simulation history
• Send anomaly summaries to Shopify Flow (if enabled by you)
• Enforce plan limits (scenario counts, run limits)

3. Data Storage and Security

All data is stored in a PostgreSQL database hosted on Railway (US-West region) using encrypted connections (TLS). Session tokens are managed through Shopify's secure authentication system. We do not store Shopify API secret keys in the database — they are held only in server environment variables.

4. Data Sharing

We do not sell, rent, or share your data with any third parties. Your store information and test data are never used for marketing, advertising, or any purpose other than providing the App's functionality to you.

5. Data Retention and Deletion

When you uninstall ShipCheck, all your data is automatically and permanently deleted, including:

• Session and authentication data
• All simulation runs and their results
• All saved test suites

No data is retained after uninstallation. You may also request data deletion at any time by contacting us.

6. GDPR Compliance

We support the following mandatory Shopify GDPR webhooks:

• Customer data request — We respond to requests for customer data. Since ShipCheck does not store real customer data, these requests typically return no data.
• Customer data erasure — We process requests to delete customer data associated with a store.
• Shop data erasure — When a store is closed or requests data deletion, we remove all associated data.

7. Storefront Impact

ShipCheck operates entirely within the Shopify Admin. It does not inject any code, scripts, or assets into your storefront. It does not affect your store's performance, appearance, or customer experience in any way.

8. Permissions

ShipCheck requests the following Shopify access scopes:

• read_products — To display products/variants in the scenario builder
• read_shipping — To read shipping profiles and run simulations
• write_draft_orders / read_draft_orders — To simulate shipping rate calculations

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify merchants of any material changes through the App or via email.

10. Contact

If you have questions about this Privacy Policy or your data, please contact us at orlachev@gmail.com.