Addito (“the App”) adds deposits, eco-fees and surcharges to the products of Shopify stores. This policy explains what data the App processes when a merchant installs it, and what happens to shoppers' data on stores that use it.
Data we process about merchants
When you install the App we receive, through Shopify, your store's domain and basic install information (granted permissions, active plan). We store the authentication sessions required to operate the App. The fee classes you create are stored inside your own Shopify store, as metafields and as technical products — not on our servers.
Data we do not collect about shoppers
The App collects no personal data from your customers. It never reads orders or customer records: the fee is added by a Shopify Function that runs inside Shopify's checkout, and the storefront block is rendered by your theme without any request to us. No cookies, no tracking.
Where data lives
The App's backend is hosted on Vercel with a PostgreSQL database (Neon) that stores authentication sessions only. Your configuration lives in your Shopify store. Server errors are reported to Sentry without request bodies or personal data.
Retention and deletion
Uninstalling the App invalidates its access immediately; Shopify removes the App's own data stored in your shop, and we delete remaining session data when Shopify sends the mandatory redaction webhook (within 48 hours of uninstall). We honor all of Shopify's privacy compliance webhooks (customers/data_request, customers/redact, shop/redact) — for customer requests there is nothing to return or erase, since we hold no customer data. The technical fee products and product metafields remain in your store, under your control.
Changes
We may update this policy as the App evolves; the effective date above always reflects the latest version.
Contact
For any privacy question, write to contact@ludiccraft.com.