Privacy Policy

Overview

This Privacy Policy explains how Ship Restrict ("we", "us", or "our") collects, uses, and shares your information when you use our products and services. We offer two separate products: the Ship Restrict WooCommerce plugin ("the Plugin") and the Ship Restrict app for Shopify ("the App"). This policy also covers our website, shiprestrict.com.

By using our products or website, you agree to the collection and use of information in accordance with this policy.

Website and WooCommerce Plugin: Information We Collect

Personal Information: We may collect personal information that you provide to us directly, such as your name, email address, and payment information when you purchase the Plugin.

Usage Data: We collect information on how you use the Plugin, including plugin configuration settings, features used, and interaction patterns to improve our services.

Technical Data: We automatically collect certain technical data when you use the Plugin, including your IP address, browser type, device type, and operating system.

Website Analytics: shiprestrict.com uses Datafa.st, a privacy-focused analytics service, to measure pageviews and site usage. If you submit your email address through our contact or lead-capture forms, we may associate it with your visit so we can respond to your inquiry.

Shopify App: What We Access and Why

When you install the App on your Shopify store, it requests the following access, each tied to a specific function:

• Products, collections, tags, and product types (write_products): used solely so you can target restriction rules at parts of your catalog. We do not modify your products.
• Shop metaobjects (write_metaobjects): we write your compiled restriction rules to a metaobject in your store so Shopify's checkout can enforce them.
• Checkout validations (write_validations): we register the checkout validation function that blocks restricted orders.

Shopify App: What We Store

We store the following on our servers:

• Your shop domain and an API access token used to communicate with Shopify on your behalf
• The restriction rules you create, including rule names, targeted products, collections, tags, restricted states, cities, and ZIP codes, and any custom block message
• Your subscription status (plan, billing period, and trial end date) cached from Shopify's billing APIs

Shopify App: What We Do Not Collect

We do not collect, store, or transmit your buyers' personal data. Shipping addresses are evaluated inside Shopify's checkout by a Shopify Function running on Shopify's infrastructure; addresses never reach Ship Restrict's servers.

We do not access your store's orders, customers, or payment information, and the App requests no permissions for them.

Shopify App: Data Retention and Deletion

When you uninstall the App, we delete your shop's sessions, restriction rules, and cached subscription data.

We respond to Shopify's mandatory privacy webhooks (customers/data_request, customers/redact, and shop/redact). Because we hold no customer data, responses to customer data requests will reflect that; shop redaction removes any remaining shop data.

Shopify App: Billing

All App charges are processed by Shopify through Shopify's app billing system. We never see your payment details; we only query your subscription status through Shopify's APIs.

Shopify App: Hosting and Third Parties

The App is hosted on Railway in the United States. Data is encrypted in transit using TLS.

How We Use Your Information

• To provide, maintain, and improve our products and services
• To process transactions and send transactional emails
• To send you technical notices, updates, and support messages
• To respond to your comments, questions, and customer service requests
• To analyze usage patterns and optimize product performance
• To protect against, identify, and prevent fraud and other illegal activities

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• With service providers who perform services on our behalf
• To comply with legal obligations or protect our rights
• In connection with a business transfer or merger
• With your consent or at your direction

Security

We implement appropriate technical and organizational measures to protect your personal information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

Your Rights

Depending on your location, you may have rights regarding your personal information, including:

• Access to your personal information
• Correction of inaccurate or incomplete information
• Deletion of your personal information
• Objection to or restriction of processing
• Data portability

Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top.

Contact Us

If you have any questions about this Privacy Policy, please contact us at: