Privacy Policy

Overview

ShopGateKeep ("the App") is operated by the app developer ("we", "us", "our"). This policy explains what data the App collects, how it is used, and your rights regarding that data.

Data We Collect

The App stores only the data you explicitly provide:

• Blocked email addresses — email addresses and patterns (e.g. *@domain.com) you add to your blocklist.
• Custom error message — the message shown to blocked customers at checkout, if you customise it.

This data is stored exclusively as metafields on your Shopify store's App Installation. It never leaves Shopify's infrastructure and is not copied to any external database operated by us.

How We Use Your Data

The blocked email list and custom error message are read at checkout time by a Shopify Function running inside Shopify's infrastructure. No server request is made to our servers during this process.

We do not use your data for analytics, advertising, or any purpose other than providing the checkout-blocking functionality of the App.

Customer Data

The App accesses the following customer data and processes it as described:

• Customer email address — read from the Shopify Admin API solely to display it in the merchant-facing abandoned checkouts dashboard. This allows merchants to identify which blocked checkout events belong to which customer. Customer email is never written to any database, log, or third-party service — it exists only transiently in the API response and the rendered UI.
• Customer phone number — evaluated transiently inside a Shopify Function at checkout time to enforce the merchant's phone blocklist. The app server never reads, receives, or stores customer phone numbers. All phone evaluation happens within Shopify's own Function runtime.

The App's database contains no customer personal data whatsoever. Customer data is not used for any purpose other than those described above — not for marketing, profiling, analytics, or any other purpose.

Customers who wish to be removed from a merchant's blocklist should contact the merchant directly.

Data Sharing

We do not sell, rent, or share your data with any third parties.

Data Retention & Deletion

The App stores no customer personal data, so no customer data retention periods apply — there is nothing to retain or delete. Your merchant configuration (blocked email/phone patterns and custom error message) persists as long as the App is installed on your store. When you uninstall the App, Shopify removes the associated App Installation metafields. No residual data is held by us.

GDPR & Privacy Rights

Because the App stores no customer PII, there is no customer data to access, export, or delete on request. If you (as a merchant) wish to delete your blocklist, you can do so at any time from the App settings or by uninstalling the App.

Contact

For any privacy-related questions, please contact us at: support@shopgatekeep.com