Privacy Policy

EngraveSafe is a Shopify app operated by Clearstage Labs. It checks new orders for missing personalization details (such as engraving text), can put those orders on hold, and lets the store's customer submit the missing details through a secure form.

What we access

• Store data: shop name, contact e-mail, currency and plan, to run the app and bill through Shopify.
• Orders: order number, line items, product tags, line-item properties (personalization fields), order note and fulfillment orders. We read new orders when they are created, and recent orders (up to the last 7 days) to catch any we may have missed.
• Customer data: for orders missing personalization only, the customer's e-mail address, used to send the form link, plus the details the customer types into the form. We do not request the customer's name, address or phone number.

What we store and for how long

• For flagged orders: order ID and number, affected items, the customer's e-mail address (when Shopify provides it), the details the customer types into the form, and status and timestamps. The customer's e-mail address, name, form answers and form link are deleted 180 days after the order was flagged, automatically; the housekeeping job runs every six hours. After that only the order number, which items were missing details, and the status and timestamps remain, so the merchant can still see what happened. Deletion happens sooner if Shopify sends a customer redaction request, and everything we hold for the store is deleted when the store uninstalls the app and Shopify sends the shop redaction request. The one exception: if the answers have not yet been written back to the order in Shopify, they are kept until that write succeeds. The details that were saved to the order stay in the merchant's Shopify store, which the merchant controls; we don't change them when we delete our copy.
• For every checked personalized order: order ID, whether details were missing and the time (kept 120 days) for usage statistics and to show the merchant that checks are running.
• For Shopify privacy requests (see below): the store, the request type, the dates and the outcome, kept for one year. Once a request is completed this record holds no customer data.
• We don't store payment details, addresses or phone numbers, and we never sell or share data with third parties for marketing.

Where data goes

• Form answers are written back to the order in the merchant's Shopify admin (order note and order attributes).
• E-mails are sent through our e-mail provider (Resend) on the merchant's behalf. Hosting: Railway. Database: Supabase.

Your rights

We act as a processor for the merchant. Customers should contact the store they bought from; merchants can reach us at snakeeyes3407@gmail.com. We handle Shopify's privacy requests like this:

• Customer data request: we record the request and e-mail the data we hold about that customer (for the requested orders) to the store's contact e-mail address, so the merchant can respond to the customer. We aim to do this within Shopify's 30-day deadline and keep retrying until it is sent. We do not send it to the customer directly.
• Customer redaction: for the requested orders and the customer's e-mail address we delete the customer's e-mail, name, form details and form link, and remove e-mail addresses from stored error messages.
• Shop redaction: when Shopify sends the request (at least 48 hours after the app is uninstalled; it is not sent if the app is reinstalled) we delete all data we hold for the store, in one step.

Changes

We'll update this page if anything changes and note the date above.