Privacy Policy

What this app stores

Preorder Box lets you take pre-orders on products you choose, using Shopify's pre-order purchase options. The app keeps the following, keyed to your shop domain:

• Your pre-order settings for each product you turn on: the product ID and title, the ship date you choose, and the IDs of the pre-order purchase option the app created for that product.
• Your storefront settings: the pre-order button text and the cancellation conditions you write, and whether new pre-orders are paused because of your plan limit. A copy is also saved in your store as app data so your theme can show it.
• A list of the pre-order purchase option IDs the app has created in your store, kept after you turn pre-orders off so that orders placed with them are still recognized when they are paid.
• For each paid order that contains a pre-order: the order ID, the order number, how many of its lines were pre-orders, when it was counted, and, if it was not counted, why (for example, a test order). This is the list of pre-orders you see in the app and what your plan counts.
• Your plan, the price you signed up at, and how many orders with pre-orders were counted each month.
• An access token issued by Shopify when you install the app, used to set up pre-order purchase options on your products and read paid orders.
• Your email setting: whether pre-order confirmation emails are on.
• A log of pre-order confirmation emails: which order, whether the email was sent, skipped or failed and why, and the sending service's message ID. It holds no email address and no email content.
• If a customer uses the unsubscribe link in a confirmation email: a one-way fingerprint (SHA-256 hash) of their email address, so your store sends no more pre-order emails to it. The address itself is not kept.

What this app does not collect

From orders, the app reads only the order ID, order number, whether it is a test order, when it was created, and which of its lines were bought with the app's pre-order purchase option. It does not read or store customer IDs, customers' names, postal addresses, or phone numbers. If you turn on pre-order confirmation emails, it reads the order's email address when the paid order arrives, uses it for that email only, and does not store it.

The confirmation email contains no tracking: we do not record whether it is opened or a link is clicked.

The storefront part of the app runs inside your theme from data your theme already has. It sends nothing to our servers and sets no cookies.

We do not receive payment information. Customers pay through your store's checkout.

We do not use your data or your customers' data to train models, and we do not sell or share it.

Who receives it

Shopify, which sends us paid orders and in which the app creates the pre-order purchase options on your products.

Railway (railway.com), which hosts the app and its PostgreSQL database in the Netherlands. Railway processes data only to host the service.

Cloudflare (cloudflare.com), which stores encrypted backups of the app's database in its R2 storage in Eastern North America. Each backup is encrypted with our key before it leaves Railway; Cloudflare cannot read it.

Resend (resend.com), which delivers pre-order confirmation emails, if you turn them on, from its servers in the United States. For each email it receives the customer's address and the email itself: your store's name, the order number, and the pre-ordered products with their ship-by dates. Resend keeps sent emails and their delivery logs for 30 days.

There are no other processors. No analytics service, advertising network, or error-reporting service receives your data or your customers' data.

The pre-order confirmation email

On the Pro plan you can turn on a confirmation email on the app's Emails page. When a paid order contains a pre-order, the app sends one email to the order's email address from notify@mail.operixstudio.com with your store's name as the sender name. It lists the order number and each pre-ordered product with its ship-by date, and replies go to your store's contact email. It is not sent for test orders, at most 50 are sent a day per store, and none to a customer who has unsubscribed.

Every confirmation email has a one-click unsubscribe link. We send no marketing email. Shopify still sends its own order confirmation as usual.

How long it is kept

Pre-order settings stay while the app is installed or until you turn pre-orders off for that product. The app deletes its record of each paid order (order ID, order number, pre-order line count) 12 months after recording it; the order itself stays in Shopify. Your monthly order counts are numbers only and stay while the app is installed.

When you uninstall the app, Shopify sends a shop/redact request 48 hours later. On that request we delete everything we hold for your shop. Shopify also deletes the pre-order purchase options the app created 48 hours after you uninstall. Your products, inventory, and orders stay in Shopify unchanged. How long Shopify keeps the app data copy of your storefront settings after you uninstall is up to Shopify.

You can ask for deletion sooner by emailing us.

The confirmation email log is deleted after 30 days.

Backups: an encrypted copy of the database is made every day and kept for 7 days, and every week and kept for 28 days. Data that is deleted — including after a shop/redact or customers/redact request — is gone from the backups within 30 days. Backups are used only to restore the service after a failure.

Requests from customers

If a customer asks your store for their data, the only thing the app holds about them is the order ID and order number of their orders that contained pre-orders, which you see in the app's Pre-orders list, and, if they unsubscribed from confirmation emails, a fingerprint of their email address that does not contain the address.

If a customer asks to be deleted, Shopify forwards a customers/redact request with their order IDs. We delete the rows for those orders. Their orders themselves stay in Shopify, where you manage them. We also delete the unsubscribe fingerprint of their email address, if there is one.

Changes

If what we store changes, this page changes with it before the change ships. The date at the top of this page is the last time that happened.

Contact

Questions, or a deletion request: beobjoong@gmail.com