This document describes the data processing carried out by PriceMaster. It is provided for guidance and should be reviewed by a legal professional before official publication.
This policy explains what data PriceMaster collects and processes when a merchant installs the app on their Shopify store, for what purpose, who it is shared with, and what your rights are.
1. Data controller
PriceMaster is published by App Studio. For any question about this policy or your personal data, contact us at contact@appstudio.example.com.
2. Data we collect
On installation, PriceMaster receives from Shopify the information needed to operate: store name and domain, Shopify plan, merchant contact details, and an Admin API access token.
During use, the app reads and writes only the data required by the enabled features: products, variants, collections, customer tags, orders, plus the price rules, quantity breaks, price lists and quotes created in PriceMaster.
PriceMaster never processes payment data (card numbers): the subscription is billed exclusively through Shopify Billing.
3. Purpose of processing
Data is used to provide the service (computing and displaying B2B prices, managing quotes and orders, generating invoices), provide technical support, and improve the reliability of the app.
It is never sold, rented, or used for advertising purposes.
4. Legal basis
Processing is based on the performance of the contract entered into with the merchant when installing the app, and, where applicable, on our legitimate interest in keeping the service secure and reliable.
5. Data sharing
Data passes through Shopify (the merchant's hosting platform) and our technical providers (app hosting, transactional email delivery), who are contractually bound to confidentiality.
No data is transferred to third parties outside this technical scope necessary for the service to run.
6. Retention period
Data is kept for the duration of the PriceMaster subscription. Upon uninstall, it is deleted within a reasonable timeframe, unless a longer legal retention requirement applies (accounting, invoicing).
7. Security
API access tokens are unique per store, revocable, and stored hashed (SHA-256). Exchanges between PriceMaster and Shopify are encrypted (HTTPS/TLS).
8. Your rights
Under GDPR, you have the right to access, rectify, erase, object to, and port your data. To exercise these rights, contact us at contact@appstudio.example.com.
9. Changes
This policy may be updated to reflect changes to the service or applicable regulations. The last-updated date is shown at the top of this page.
Questions about your data? Write to us at contact@appstudio.example.com.