Privacy Policy

Overview

RuleArch is a Shopify application for configuring merchant-defined rules that affect which existing delivery options appear at checkout. Product scope can use custom categories or types; predefined perishable or cold-chain tags are optional. This policy explains the information RuleArch processes to provide, secure, support, and improve the service.

Information we process

• Shop identity and Shopify installation/session information needed to authenticate the app.
• Protection rules, publishing state, fulfillment-location status, and subscription observations.
• Webhook identifiers and processing records used for lifecycle, privacy, and security operations.
• Protection Impact telemetry such as event identifiers, product identifiers, timestamps, currency and order totals, and a one-way hash derived from the checkout token.

RuleArch does not request Shopify Admin API access to customer names, customer email addresses, customer phone numbers, or customer address records for its current product features.

Checkout destination data

Shopify may provide destination country, province/state, and postal-code fields directly to the Delivery Customization Function while checkout is evaluated. RuleArch uses those fields only to evaluate merchant-configured regional rules and does not persist those checkout address fields in its application database.

How information is used

• Authenticate the merchant and maintain the Shopify app installation.
• Save, publish, reconcile, pause, and delete protection rules.
• Enforce plan capabilities and observe subscription state.
• Operate optional Protection Impact analytics.
• Detect failures, secure the service, and respond to support requests.
• Comply with Shopify privacy and app-lifecycle requirements.

Service providers and transfers

RuleArch relies on Shopify for commerce-platform services and Cloudflare for application hosting, database, queue, networking, and related infrastructure. Information may therefore be processed in countries where these providers operate, subject to their applicable data protection safeguards and contractual terms.

Retention and deletion

Store-scoped application records are retained only while needed to operate the service, satisfy security or legal obligations, or complete Shopify lifecycle processing. RuleArch processes Shopify uninstall and mandatory privacy webhooks to remove store-scoped application data. Infrastructure and security logs may be retained for limited periods by the relevant service provider according to its operational and security practices.

Privacy requests

Shopify customers may submit applicable privacy requests through the merchant and Shopify. RuleArch also processes Shopify's mandatory customer data request and deletion webhooks. Merchants can contact RuleArch directly about privacy questions.

Security

RuleArch uses Shopify authentication, webhook verification, scoped permissions, server-side session handling, and infrastructure access controls. No internet service can guarantee absolute security.

Children

RuleArch is a business application for Shopify merchants and is not directed to children.

Changes

This policy may be updated when the service, legal requirements, or operational practices change. The effective date above will be updated when a revised version is published.

Contact

Privacy: privacy@perishguard.shop

Support: support@perishguard.shop