Privacy Policy

This Privacy Policy explains what data the WRIT Sentinel app ("the App", "we") accesses and how we use it when installed on a Shopify store.

Data we access

• Orders — to audit whether restricted-product orders come from companies holding the required license.
• Companies — to associate license documents and compliance state with each B2B company.
• Products — to let merchants map restricted products/collections to required license types.

We request the minimum scopes needed (read_orders, write_orders, read_companies, write_companies, read_products). We do not request access to customer profiles and do not use customer names, emails, phone numbers, or addresses.

How we use it

Solely to provide the App's function: tracking license documents and expiry, computing per-company compliance state, auditing orders, and surfacing a merchant worklist. We do not sell data or use it for advertising.

Where it is stored

License records, compliance settings, and audit logs are stored in our application database (hosted on DigitalOcean Managed PostgreSQL, encrypted at rest and in transit). Compliance-state metafields are stored on your Shopify store.

Retention & deletion

We honor Shopify's mandatory data-protection webhooks. On app uninstall and on a shop/redact request, all merchant store data we hold is permanently deleted.

Marketing list

Separately from the App, our public website may collect an email address you voluntarily submit to join our early-access list. This is prospect/marketing data — not merchant store data — and you can have it removed any time by emailing us.

Contact

For privacy requests, contact support@worqflow.org.