1. Overview & Architecture

Holdline ("the App", "we", "us") is a Shopify application that empowers e-commerce merchants to manage out-of-stock inventory through pre-orders, display clear delivery timeline notes, and automate order tagging for fulfillment.

This Privacy Policy explains the data processing practices of Holdline when installed by merchants from the Shopify App Store.

2. Information We Process

2.1 Information Collected from Merchants

We collect and retain only the minimal configuration data necessary to operate the application:

• Shop Domain: Your unique Shopify domain identifier (e.g. store.myshopify.com).
• Authentication Credentials: Encrypted OAuth access tokens granted by Shopify.
• Pre-order Settings: Shopify Product/Variant GIDs, pre-order limits (maxQuantity), merchant shipping notes, and app-owned inventory location IDs.

2.2 Information Processed from Store Shoppers

• Zero PII Storage: We do not store shopper personal identification information (names, emails, delivery addresses, phone numbers, or payment data).
• Ephemeral Order Tagging: Incoming orders received via the orders/create webhook are inspected in memory solely to check for active pre-order line items. Once the Pre-order tag is applied via Shopify API, the order payload is permanently evicted from memory.

2.3 Cookies and Tracking

Holdline does not inject tracking cookies, advertising pixels, or third-party behavioral scripts into the merchant's storefront.

3. Lawful Purpose: Store Management

Data processing is conducted strictly under the lawful basis of Store Management and Fulfillment Support:

• Enforcing inventory limits and checkout availability via Shopify inventory policies.
• Adding administrative Pre-order tags to orders to automate merchant fulfillment.
• Rendering storefront delivery estimation badges natively via Online Store 2.0 Theme App Extensions.

4. Mandatory GDPR & Compliance Webhooks

Shopify Webhook Topic	Holdline Action
customers/data_request	Returns 200 OK. No customer PII is stored; no data export required.
customers/redact	Returns 200 OK. No customer PII is stored; no deletion required.
shop/redact	Permanently deletes all remaining store configuration records and OAuth tokens within 48 hours.
app/uninstalled	Triggered immediately upon removal: cleans up Shopify Pre-order Location and deletes merchant database entries.

5. Data Retention and Security

Data is stored only for active installations. When the App is uninstalled, all merchant records are deleted automatically. All API communications use industry-standard TLS 1.3 / HTTPS encryption.

6. Contact Us

For privacy inquiries, concierge setup assistance, or data compliance requests, contact Sunkars support at [email protected].