Privacy policy
This policy explains what the Exception Digest Shopify app ("the app", "we") reads, stores and sends when a merchant installs it, and how that data is deleted. Exception Digest is operated by Ocean Research LLC. It covers the app only. It describes what the app's code does today, and we update it when that changes.
What the app does
The app finds paid orders that are still unfulfilled after the merchant's chosen number of hours, adds the tag
exception-digest to them, and shows that list on the Late orders page in the app.
Shopify access the app requests
- read_orders: to find paid, unfulfilled orders created before the cutoff. Shopify only shows the app roughly the last 60 days of orders.
- write_orders: used only to add the
exception-digesttag to late orders. The app does not change, cancel, fulfill or refund orders, and does not remove tags.
Data the app reads from Shopify
- For each matching order: its order ID, order name (for example #1001), created date and existing tags.
- The app's own subscription status (plan name, status and whether it is a test charge).
- Whether the store is a Shopify development store, to decide whether plan charges are test charges.
The app does not request customer names, email addresses, postal addresses, phone numbers, line items, prices or payment details, and it does not read any data from the online store or from customers directly.
Data the app stores
| Data | What it contains | Why |
|---|---|---|
| Shop session | The shop's myshopify.com domain, the offline access token and refresh token Shopify issues to the app, their expiry, and the granted scopes. | To call the Shopify Admin API for scans, including the daily scheduled scan. |
| Settings | The late threshold in hours, the optional owner name the merchant types, and the current plan name. | To run scans and show the list in the app. |
| Scan history | For each scan: time, cutoff, counts, plan name, any error text, the list of late orders (order ID, order name, created date and Shopify Admin link), and any per-order tagging errors. | To show the latest results in the app. |
The app stores no customer contact details (names, emails, addresses, phone numbers). The only data tied to a customer is the order ID, order name and created date of their late orders in scan history.
Where data is sent
The late-order list is shown only inside the embedded app. We do not send it to third-party chat, email or notification services.
We do not sell data, share it for advertising, or use it to train models.
Service providers (subprocessors)
| Provider | Purpose | Location |
|---|---|---|
| Render (Render Services, Inc.) | Hosts the app and its database on a persistent disk, and keeps server logs and automatic disk snapshots. | United States (Virginia) |
| Shopify | App platform and billing for the app's plans. | Per Shopify's own policy |
Retention and deletion
- While the app is installed, settings and scan history are kept. Scan history is not pruned automatically.
- Uninstall: when Shopify notifies the app that it was uninstalled, the shop's sessions, settings and scan history are deleted right away.
- shop/redact: when Shopify sends this request (48 hours after uninstall), the app deletes the shop's sessions, settings and scan history again, so nothing is left even if the uninstall notice was missed.
- customers/redact: the app removes the orders listed in the request from all stored scan history for that shop.
- customers/data_request: the only data tied to a customer is the order ID, order name and created date of their late orders in scan history. On a data request we provide those records to the merchant.
- Deleted data can remain in Render's automatic disk snapshots and in server logs until they expire under Render's retention schedule. Server logs can include the shop domain and request details.
- Tags already added to orders stay on those orders in Shopify after uninstall. Merchants can remove them in Shopify Admin.
Security
- All traffic to the app uses HTTPS.
- Shopify webhooks, including the privacy webhooks above, are accepted only with a valid Shopify HMAC signature.
- The scheduled scan endpoint requires a secret bearer token.
Merchant and customer rights
Merchants can delete all data the app holds by uninstalling it. Customers of a store should contact that store. Shopify forwards customer data and redaction requests to the app as described above.
Contact
Exception Digest is operated by Ocean Research LLC. For privacy questions or requests, email contact@oceanresearchllc.com.