Privacy Policy

To provide its features, the App requests access to the following information through the Shopify API.

• Shop & account information — Store name, store URL, plan information, and the administrator's email address, name, and locale (required for authentication and operation).
• Product & inventory information — Product IDs, variant IDs, and inventory quantities (used for selling-phase management and inventory-linked rules).
• Customer email addresses — Email addresses submitted through the storefront Waitlist (back-in-stock) form, and email addresses recorded on pre-order, made-to-order and deposit/balance orders (used for back-in-stock, order confirmation, delay, shipping and balance-payment notifications).
• Order information — Order IDs, quantities, amounts, phase status, and shipping / estimated delivery dates (used to track order progress and detect delays).
• Shipping address, billing address, phone number and name (packing slips only) — When a merchant prints a packing slip from Order progress, the App retrieves the order's shipping address, billing address, phone number and name from Shopify and displays them on screen. These are not stored in the App's database or logs; they are retrieved from Shopify each time they are displayed.
• Notification data — Recipient email addresses, email templates, and send-queue status (used to manage the delivery of email notifications).
• Feedback — Feedback text and attachments submitted by the user. For support and improvement purposes, these are sent to a support management system operated by us (desk-api.jizai.dev).
• Customer tags — To evaluate the "tag required" purchase restriction at checkout, the app keeps a copy of your Shopify customer tags (synced via the customers/create and customers/update webhooks). No customer attributes other than tag names are retained.
• Packing slip logo — An image uploaded by the merchant at their discretion. Used only in the header of packing slips printed from Order progress.

The API scopes the App requests from Shopify and their purposes are as follows.

• write_products / read_products — Writing selling-phase status to product metafields and monitoring inventory.
• write_orders / read_orders — Applying order tags, phase management, and delay detection.
• read_fulfillments — Monitoring fulfillment status (used to track order progress).
• write_customers / read_customers — Waitlist management and purchase-limit checks (such as VIP detection via customer tags).
• write_merchant_managed_fulfillment_orders — Used to perform fulfillment (shipping) operations and bulk fulfillment.
• write_validations / write_payment_customizations — Used to register the Shopify Functions that enforce purchase restrictions at checkout and limit payment methods on pre-order and made-to-order orders.
• read_locales — Retrieving the shop's primary language and published locales (used to serve storefront wording and notification emails in the right language).
• read_translations / write_translations — Used to edit and store storefront wording per language.
• write_purchase_options / read_payment_terms / read_all_orders / read_payment_mandate / write_payment_mandate (optional) — Requested only when a store that uses deposit/balance payments grants them. Used to create selling plans for pre-orders, read payment schedules and balances, match pre-orders older than 60 days, and collect the remaining balance on its due date.

• To automatically switch selling phases (announcement, pre-order, made-to-order, regular sale) based on a calendar schedule.
• To accept Waitlist (back-in-stock) email sign-ups and send automatic notifications.
• To apply purchase limits (per-order limit, per-customer limit, VIP-only sales).
• To track the progress of pre-order and made-to-order orders and to detect and notify of delays.
• To let merchants print packing slips and ship products (shipping address, phone number, name).
• To deliver email notifications (order confirmations, shipping notices, delay alerts, etc.) via Resend.
• To improve the App, fix issues, and provide support.

The App integrates with the following external services.

• Resend — Used for email delivery. Only recipient email addresses and email content are sent.
• Shopify Platform — Used for real-time data synchronization via Webhooks, Flow Triggers, and the Metafields API.
• Fly.io — Used as the hosting infrastructure for the App. Data is stored on encrypted storage in the Tokyo region, and automatic backups are encrypted as well.
• Feedback management system (desk-api.jizai.dev) — Operated by us. Used to receive and manage feedback content and attachments submitted by users.

• Shipping addresses, billing addresses, phone numbers and names shown on packing slips are not stored.
• Incoming order data is reduced to the fields needed for processing, stored temporarily, and deleted as soon as processing finishes (data that fails to process is also deleted within 7 days).
• Email addresses and other details of notifications that have finished sending are deleted 90 days after creation.
• Back-in-stock sign-up email addresses are automatically deleted 1 year after their last update (the most recent of sign-up, notification or unsubscribe). They are deleted earlier upon a customer data deletion request or when the App is uninstalled. Unsubscribed addresses receive no notifications.
• Email addresses in back-in-stock send history are deleted 90 days after sending.
• Contact details on deposit/balance orders are deleted 90 days after the payment is completed or the cancellation is completed.
• Exports created for customer data requests can be downloaded for 7 days only, after which their identifiers are deleted (the record itself is deleted 30 days after expiry).
• Records of merchants viewing personal data (staff ID, count and time; the personal data itself is not included) are kept for 365 days to detect unauthorized access. Logs of external AI integration activity are also deleted after 365 days.
• Order records, email templates and notification settings are stored per shop and deleted when the App is uninstalled.
• When the App is uninstalled, the shop's data is deleted immediately, and copies remaining in backups are removed within 5 days at most.

We do not provide your personal information to third parties except in any of the following cases.

• When disclosure is required by law.
• When necessary to protect a person's life, body, or property.
• When we have your prior consent.

You have the following rights regarding your personal information.

How we handle the personal data we process on behalf of merchants (sub-processors, security measures, incident notification, deletion at termination) is set out in our Data Processing Agreement (DPA).

For questions about this Privacy Policy or the handling of information, or for deletion requests, please contact us below.