Privacy Policy

Datastak Consulting Corp. ("we", "our", or "us") operates CleanLimit: Order & Cart Limits ("CleanLimit" or the "App"). This Privacy Policy explains how merchant and storefront information is collected, used, and protected when you install or interact with our Shopify application.

1. Information We Collect

CleanLimit is engineered under privacy-by-design principles:

• Merchant Account Data: When installing CleanLimit, we receive store identification metadata via Shopify OAuth (store domain, plan status, and authorized scopes) necessary to manage your subscription and authenticate admin dashboard access.
• Rule Configurations: The custom rules, spend thresholds, quantity parameters, and banner copy configured inside your admin dashboard.
• Zero Consumer PII: CleanLimit executes cart validation in the customer's browser. We do NOT store personal consumer names, shipping addresses, phone numbers, or payment information.

2. How We Use Information

We use collected configuration data exclusively to:

• Serve your active spend and quantity rules to your storefront Theme App Embed.
• Verify billing subscription status via Shopify's Billing API.
• Provide customer support when initiated by you at cleanlimit@datastak.ca.

3. Data Sharing & Third Parties

We do not sell, rent, or monetize your store data. Data is shared exclusively with cloud infrastructure providers essential to application hosting (Fly.io, cloud region Toronto, Canada) and Shopify APIs.

4. GDPR & Shopify Mandatory Privacy Compliance

CleanLimit fully supports Shopify's automated privacy webhooks (customers/data_request, customers/redact, and shop/redact). When a store uninstalls CleanLimit, all store rules and session tokens are completely deleted upon receipt of the automated redaction payload.

5. Contact Us

For privacy inquiries or data requests, contact our privacy team at:
Datastak Consulting Corp.
Email: cleanlimit@datastak.ca