Privacy policy

Checkpost is a Shopify app run by Seedwren ("we"). It lets merchants set checkout rules, such as blocking PO boxes or limiting quantities, that run inside Shopify checkout. This policy explains what we collect when a merchant installs Checkpost, and how we use it.

What we collect

• Store details: your shop domain, store name, the store owner's email, your Shopify plan and your Checkpost plan. We use these to sign you in, apply plan limits and answer support requests.
• Access tokens: the session tokens Shopify gives the app, which let it act on your store.
• Your rules: the checkout rules you create. Rules are saved in your Shopify store; we keep earlier versions so you can restore them from the History page.
• AI rule drafts: when you describe a rule in words, we keep the text you wrote and the draft rule, and count how many drafts you make each day.
• Support messages: messages you send us through the in-app support chat.
• Product data: the app reads product information (read_products) to build rules. We do not store it.

What we don't collect

Checkpost does not store your customers' personal information. Checkout rules run inside Shopify's own infrastructure (Shopify Functions). They see the cart, address and email only to decide whether to allow the checkout, and none of that data is sent to us. If you list tester emails for a rule in test mode, they are saved with that rule in your store.

Who we share it with

We don't sell or rent data. We use these service providers to run the app:

• Shopify, which hosts your store, runs the checkout rules and handles billing.
• Our hosting and database providers, which store the data listed above.
• Google (Gemini API), which receives the text you write when you ask the AI to draft a rule, and returns the draft. Don't include personal information in rule descriptions.

How long we keep it

When you uninstall Checkpost, we delete your access tokens, AI drafts, AI usage and rule history straight away. When Shopify asks us to erase your store's data (48 hours after uninstall), we also delete your support conversation. Rules saved in your store are part of your Shopify data.

Your rights

You can ask for a copy of your data, or for it to be corrected or deleted, at any time. If you are in the EEA, the UK or California, you have these rights under the GDPR, the UK GDPR or the CCPA. Contact us at support@seedwren.com and we'll respond within 30 days.

Security

Data is sent over HTTPS and stored with access limited to the people who run Checkpost. Billing is handled entirely by Shopify, and we never see payment details.

Changes

If we change this policy, we'll update the date above and, for significant changes, let you know in the app.

Contact

Questions about this policy: support@seedwren.com.