Privacy Policy
Cartwright Labs · Last updated November 5, 2026
This policy covers all Cartwright Labs apps for Shopify, including TariffLine and GroupOrder. It explains what information each app accesses, why, how long we keep it, and the choices you have. We keep it in plain language on purpose.
What we access and why
| Information | Used by | Purpose |
|---|---|---|
| Store details (store domain and currency; in GroupOrder's admin, timezone is taken from your browser, not from Shopify) | All apps | To run the app for your store and apply your settings correctly. |
| Product information, including each product's country of origin | TariffLine | To apply the recovery rate you set for the country each product comes from. |
| Order information (items, amounts, country of origin, surcharge collected) | TariffLine | To show you an accurate report of the surcharges collected on your orders. |
| Campaign and participant information (participant name, email, chosen variant, payment status) | GroupOrder | To run group orders: to show you who has joined and paid, and to send participants their order confirmations. |
| Subscription and billing status | All apps | Handled through Shopify's billing. We see your plan status; we never see or store your payment card details. |
We do not access your customers' payment card details, and we do not collect information beyond what is listed here.
How data is used
Data is used only to operate the app you installed — applying your TariffLine rates and reports, or running your GroupOrder campaigns and rosters. We do not sell your data, and we do not share it with third parties other than the service providers below, who process it only so the apps can run:
- Google Cloud — application hosting (us-central1 region).
- Neon — database hosting.
- Resend — sending participant confirmation emails for GroupOrder.
- Shopify — the platform the apps run on, including billing.
How long we keep it
- Your store's settings and records are kept while the app is installed.
- About 48 hours after the app is uninstalled, your store's data is deleted from our systems, apart from records we are legally required to retain (such as billing history).
- GroupOrder roster links remain viewable for 90 days after a campaign closes, then expire.
- Operational logs may include your store domain and are retained under Google Cloud's standard log retention, separate from the deletion described above.
Your choices and rights
Depending on where you and your customers are located, privacy law may give you and them rights to access, correct, export, or delete personal information. We honor Shopify's required privacy requests: when Shopify sends us a request to view or delete a customer's data on your store's behalf, we act on it automatically. To make a request directly, email support@cartwrightlabs.com and we will respond within 30 days.
Security
App data is stored with our hosting providers above, transmitted over encrypted connections, and accessible only to the Cartwright Labs team members who need it to operate and support the apps.
Changes to this policy
If we change this policy in a way that affects what data we collect or how we use it, we will update this page and note the new date at the top.
Contact
Cartwright Labs · support@cartwrightlabs.com · cartwrightlabs.com