Privacy Policy

Last updated: March 9, 2025

Skue Labs LLC ("we", "us", or "our") operates the Skue: Bulk Order Form application (the "App") for Shopify. This Privacy Policy explains what information we collect, how we use it, and your choices regarding that information.

1. Information We Collect

When a merchant installs the App, we receive and store the following information from Shopify:

• Store information: Shop name, domain, and Shopify plan details provided during the OAuth installation flow.
• Product data: Product titles, handles, variants, prices, inventory levels, and images — accessed via the Shopify Admin API to render the order form.
• App configuration: Settings the merchant configures within the App (column visibility, branding, delivery windows, order templates, profiles).

We do not collect personal information from the merchant's customers. The App operates on the storefront using data provided by Shopify's Liquid templates and public APIs. No customer names, email addresses, payment details, or browsing behavior are collected or stored by the App.

2. How We Use Information

We use the information described above solely to:

• Provide and operate the App's features (order form, pricing display, templates).
• Store merchant configuration preferences so the App functions correctly.
• Authenticate API requests between the storefront and our server.
• Diagnose and fix technical issues.

3. Data Storage & Security

App configuration and session data are stored in a PostgreSQL database hosted on Fly.io with encrypted connections. Access tokens provided by Shopify are stored securely and used only to make authorized API calls on the merchant's behalf.

4. Third-Party Sharing

We do not sell, rent, or share merchant or customer data with third parties. Data is only transmitted between the App, Shopify's APIs, and our hosting infrastructure as required to operate the App.

5. Data Retention

We retain merchant configuration data for as long as the App is installed. When a merchant uninstalls the App, we delete their configuration data and access tokens within 30 days of receiving the uninstall webhook from Shopify.

6. Merchant Rights

Merchants may request access to, correction of, or deletion of their data at any time by contacting us. We will respond to verified requests within 30 days.

7. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above. Continued use of the App after changes constitutes acceptance of the updated policy.

8. Contact

If you have questions about this Privacy Policy or our data practices, please contact us.

Skue Labs LLC