Privacy Policy

This policy describes what data the Customs Declaration Auto-Fill app ("the app", "we") collects from Shopify stores that install it, how that data is used, and how it is deleted. The app is operated by MerchantPro.

Data we store

• Store identity: your .myshopify.com domain and the Shopify API access token created when you install the app.
• Usage counts: the number of customs forms generated per month, used to enforce plan limits.
• Subscription status: your current plan tier, kept in sync by Shopify billing webhooks.

Data we access but do not store

To generate customs forms, the app reads order details (shipping address, line items, totals) and the associated customer name and contact details from the Shopify API at the moment you generate a form. This data is used to fill the PDF you download and is not saved to our systems. Generated PDFs are delivered directly to your browser and are not retained.

What we never do

• We do not sell, rent, or share your data or your customers' data with third parties.
• We do not use your data for advertising or profiling.
• We do not set tracking cookies.

Where data lives

The app runs on Vercel (hosting) and stores its records in a Neon PostgreSQL database, both located in the United States. Payments are processed entirely by Shopify — we never see your payment details.

Data deletion

• When you uninstall, your access token is deleted immediately.
• 48 hours after uninstall, Shopify sends us a redaction request and all remaining records for your store (usage history, plan) are permanently deleted.
• Customer redaction requests from Shopify are acknowledged automatically; because we store no customer personal data at rest, there is nothing further to delete.

GDPR & compliance

The app implements Shopify's mandatory privacy webhooks (customers/data_request, customers/redact, shop/redact) and responds to them automatically. If you need a manual data export or deletion, contact us and we will complete it within 30 days.

Contact

Questions about this policy or your data: timothy.crosas@gmail.com. We may update this policy as the app evolves; material changes will be reflected on this page with a new "last updated" date.