Privacy Policy

This Privacy Policy explains how Digital Project Design ("DPD", "we", "us", "our") handles information in connection with the Professional List Manager application (the "App") for Shopify. It applies to merchants who install the App ("Merchants") and their staff, to Merchants' customers ("Customers") and store visitors, to visitors to the App's own web pages, and to people who contact us about the App. In this policy, "you" means a Merchant, except in sections 1f and 8.

The App lets a Merchant's signed-in Customers (business buyers and individual shoppers) save product lists ("Lists"), reorder from them, and add a List's items to their cart in one step ("Move to cart"). The Merchant's sales representatives manage Lists for Customers and B2B companies ("Companies") in the App's screens in the Shopify admin (the "Rep Tools"). They can also share a List with every Customer who has certain customer tags ("shared Lists").

Our role. For information about a Merchant's staff, Customers and store visitors, DPD acts as a data processor on behalf of the Merchant, who is the data controller. Our Terms of Service and Data Processing Addendum set out our obligations as a processor. Each Merchant is responsible for its own privacy notice and for any consent it must obtain; this policy describes what the App does so Merchants can make those disclosures accurately. DPD is the controller for its own business records, for support email, and for visitors to the App's own web pages.

a. Merchant and staff information

• Store details: your store's myshopify.com domain, your App settings and text customizations, the customer tags you choose for shared Lists, and summary figures shown in the App (such as total list value).
• Store credentials: the access tokens Shopify issues so the App can work with your store.
• Staff sign-in details: when a staff member opens the App, Shopify provides their user ID, name, email address, language, and whether they are the account owner or a collaborator. We keep these to sign them in and greet them. A staff member's user ID is also stored in the history of the Lists they change.
• Subscription status: Shopify handles billing. The App only checks your subscription with Shopify; we never see payment details.

b. Customer information

• Customer ID: when a Customer is signed in, Shopify tells the App their Customer ID. We also use the Customer ID of any Customer a representative creates a List for. We store Customer IDs to link Lists to their owners and to record who created or changed a List.
• Name and email address: in the Rep Tools, the App reads Customer names and email addresses from Shopify and shows them to your staff so they can find the right Customer. It also shows a Company contact's name when a Company search matches them. We do not store Customer names or email addresses in the App's databases, though search text your staff type can appear in our technical logs (section 1d).
• Customer tags: each time a signed-in Customer uses the App, we read their customer tags to decide which shared Lists they can see. We do not store them.
• Company and location: for B2B buyers, the App uses the Company and Company location they are buying for, to show the right catalog and prices. We store Company IDs with Lists, and a Company ID and location ID with the pricing location each representative last chose. Company and location names are shown to your staff but not stored.
• List content: List names, the products on each List, quantities and dates. List names are free text and are kept as written, so they should not contain personal details.

Apart from what Shopify includes in its privacy requests (section 5), the App does not read Customer phone numbers, postal addresses, order history or payment details. Of the protected customer fields Shopify defines (name, email address, phone number and postal address), the App has access only to name and email address, and we requested that access only for the App's features.

c. Store visitors and visitors to the App's own web pages

If you add the App's "Add to list" block to your product pages, a visitor's browser contacts the App when a product page loads. By default this happens for every visitor, signed in or not; you can limit the block to signed-in or B2B Customers. These requests appear in our technical logs (section 1d). Visits to the App's own web pages, such as its home page, are logged the same way.

d. Technical logs

Our hosting provider, Cloudflare, logs requests to the App so we can run it, secure it and fix faults. A log entry can include:

• the time and the web address requested, which can contain your store's domain, Shopify record IDs such as a Customer ID, and search text typed into the App (for staff, this can be a Customer's name or email address);
• the requester's IP address, browser details and approximate location;
• error messages.

Technical logs are kept for up to 7 days.

e. Operational telemetry

To find faults and to notice when the App stops working for a store, we keep operational records labeled with the store's myshopify.com domain:

• daily counts, for example of requests from your customer accounts and storefront, errors, and uninstalls;
• a limited number of error details: the type of error, the kind of page with identifiers removed, and a shortened, filtered error message.

These records are designed to exclude Customer data and have no fields for IP addresses or Customer IDs. We also keep technical traffic statistics (request type, result and response time) with no store label. A daily summary of these records is emailed to DPD, and the records can be viewed on a private DPD dashboard.

f. Support email and business records

If you email us, we receive whatever you send. We also keep business records about each installation, such as the store's name and domain, install and uninstall dates, plan and billing events reported by Shopify, and support history.

g. Cookies

The App sets no cookies. During Move to cart, it stores one temporary, non-identifying flag in the browser for the length of the browser session.

We use the information above only to:

• provide the App's features: creating, viewing, sharing and reordering Lists, showing the right catalog and prices, and deciding which shared Lists a Customer can see;
• recognize staff and Customers signed in through Shopify, record who changed Lists, and check your App subscription;
• keep the App secure and reliable, and recover it from data loss;
• support you and answer questions about the App;
• keep business records of installations for our business, accounting and legal purposes;
• meet our legal obligations and respond to Shopify's privacy requests (section 5).

We limit our use of personal data to these purposes, and we use Customer personal data only to provide, secure and support the App and to meet our legal obligations. Apart from the technical logs and telemetry in section 1, we use no analytics, advertising or tracking services, and we build no browsing or marketing profiles. We do not sell or rent personal data to anyone.

The App does not make automated decisions that have legal or similarly significant effects on anyone. Deciding which shared Lists a Customer sees is a simple match between their customer tags and the tags the Merchant chose.

We share information only with the service providers and AI tools described in this section, with our professional advisers as described below, and where required by law.

• Shopify — The platform the App runs on, the source of the store and Customer data the App reads, and billing — Per Shopify
• Cloudflare — App hosting, databases, technical logs, operational telemetry, backups, sending DPD's internal summary email, and sign-in to DPD's dashboard — Cloudflare global network; see section 7
• Google (Google Workspace) — DPD's email, including support email and the internal daily summary — Per Google

We use AI tools, including Anthropic's Claude, to develop, operate and troubleshoot the App. In that work they may see technical and store-level information, such as store domains, error messages and record IDs (including Shopify Customer IDs). We do not give them the names or contact details of Customers or Merchant staff, and we have turned off the setting that lets Anthropic train its models on our conversations. What they see can remain in our working records, and with Anthropic under its own terms.

We may share business records with our professional advisers, such as accountants and lawyers, who must keep them confidential. We do not sell personal data or share it for cross-context behavioral advertising.

• While the App is installed: we keep your settings, the Lists created in your store, your store's credentials and your staff's sign-in details.
• Customer deletion requests: when Shopify sends a customers/redact request, we delete the Lists that Customer owns and their items, delete items they added to other Lists, and replace their Customer ID with a placeholder on anything else they created or changed. A List name they typed for a List they did not own (such as a Company's List) is kept as written.
• Customer data requests: when Shopify sends a customers/data_request, the App records the request in our technical logs. The record can include the details Shopify sends (such as the Customer's email address and phone number) and List records that carry the Customer's ID. To respond to the Customer, contact us at plm@digitalprojectdesign.com and we will provide the List data we hold about them.
• Uninstall: when the App is uninstalled, we delete your staff's sign-in details and the App's Shopify admin access tokens for your store. About 48 hours later Shopify sends a shop/redact request, and we then delete your store's List data, the App's technical record of your installation, and the operational telemetry labeled with your store.
• Technical logs: kept by Cloudflare for up to 7 days and then deleted automatically. They are not deleted earlier by a deletion request or uninstall.
• Operational telemetry: kept for about 90 days. Records that mention a store without being labeled with it expire on that schedule, and technical traffic statistics, which carry no store label, expire after three months.
• Backups: every night we back up the App's databases to private storage in North America, and Cloudflare keeps a 30-day recovery history of each live database. Deleted data can remain in backups and recovery history for about 30 days before it expires automatically. We use them only to recover the App from data loss or corruption.
• Email, business records and working records: support emails, internal summaries and working records are kept for as long as we need them to support, operate and fix the App. Business records are kept after uninstall for our business, accounting and legal purposes.

• Encryption in transit: the App's web addresses use HTTPS, and its connections to Shopify and to its Cloudflare databases and storage use TLS.
• Encryption at rest: Cloudflare encrypts the App's databases and backups at rest (AES-256).
• Separate List databases: each store's List data is kept in its own database.
• Access: only DPD, including through the AI tools described in section 4, can reach the App's production systems, logs and backups. DPD's dashboard requires a sign-in limited to DPD staff.
• Shopify permissions: apart from navigation menus, which the App uses to add the Lists link to the customer account menu, its access to your store's admin data is read-only. It also holds two Shopify storefront permissions, to create carts and storefront access keys, that it no longer uses. It cannot change products, Customers, orders or prices.

No method of transmission or storage is completely secure, but we take reasonable measures to protect the information we process.

Information may be processed in countries other than where the Merchant, its staff or its Customers are located. The App's databases are stored in a Cloudflare region (currently North America or Europe), backups are stored in North America, and logs and telemetry are processed on Cloudflare's global network. Google and the AI tools in section 4 process information where they operate. DPD is based in the United States and operates the App from there. We rely on our service providers' safeguards for the transfers they carry out.

Depending on where you live, you (or, for Customer data, the Merchant on a Customer's behalf) may have rights to access, correct, delete or restrict the processing of personal data, and to object to certain processing.

• Customers and store visitors: please direct requests to the Merchant whose store you use; the Merchant is the controller of your data. Deletion requests sent through Shopify are handled automatically (section 5). For access requests, the Merchant can contact us and we will provide the List data we hold about you.
• Merchants, Merchant staff, visitors to the App's own web pages, and people who contact us: contact us using the details in section 11. For staff details processed for a Merchant, we may refer your request to that Merchant.

The App is a business tool and is not directed to children. We do not knowingly process the personal data of children.

We may update this policy from time to time. When we do, we will revise the "Last updated" date above and post the new version at the published URL. Material changes will be communicated as required by applicable law.

Digital Project Design (DPD)
Digital Project Design LLC
10441 Chaney Ave, Downey, CA 90241, USA
Privacy/support email: plm@digitalprojectdesign.com
Website: https://www.digitalprojectdesign.com