Privacy Policy — OrderGuard: Min & Max Limits

Last updated: October 31, 2026

OrderGuard: Min & Max Limits ("the App") is provided by [OWNER: business name] ("we", "us"). This policy explains what information the App accesses, how it is used, and your rights. It applies to merchants who install the App and to their customers.

Information the App accesses

From merchants (store owners and staff)

• Basic store information provided by Shopify when you install the App: store domain, store currency and published languages.
• A login session for the staff member using the App inside Shopify admin (session token, access token, and — if Shopify provides it — the staff member's name, email and locale). This is used only to authenticate requests from the Shopify admin.
• Product, variant and collection names, read only to show them next to your rules.

Rules you create (limits, product/collection IDs, messages, customer tags you type) are stored in your own store, in an app-owned Shopify metafield. They are not stored on our servers.

From your customers The App does not collect, store or transmit personal information about your customers. Order limits are checked inside Shopify's own infrastructure (a Shopify Function) and on your storefront. If a rule uses customer tags, Shopify tells the Function only whether the current customer has those tags; that answer is not stored or sent to us. The storefront script runs in the customer's browser, reads the cart from your store, and sends nothing to us.

How we use information

• To provide the App's features: saving rules, showing them in the admin, enforcing them at checkout and displaying them on your storefront.
• To authenticate staff using the App.
• To respond to support requests you send us.

We do not sell information, use it for advertising, or share it with third parties except our hosting provider (Hostinger), which stores the App's session database on our behalf.

Retention and deletion

• Session data is deleted when you uninstall the App.
• Within 48 hours of uninstalling, Shopify sends us a shop/redact request and we delete any remaining data for your store.
• Rules stored in your store's metafields are managed by Shopify; app-owned data is removed by Shopify when the App is uninstalled.
• Because we hold no customer data, customer data and deletion requests (customers/data_request, customers/redact) require no action beyond confirming this.

Security

Data is transmitted over HTTPS. Access to the App is authenticated through Shopify.

Your rights

Depending on where you live (for example under the GDPR or CCPA) you may have the right to access, correct or delete your personal information. Contact us at the address below. Merchants can also uninstall the App at any time.

Changes

We may update this policy. Material changes will be announced in the App.

Contact

[OWNER: business name and postal address] Email: [OWNER: support email]