TreStackExplore apps

Legal

TreStack Checkout privacy policy

How TreStack Checkout collects, uses, and shares information when you install and use the app, and what it keeps about the buyers on your checkout.

TreStack Checkout ("the App") is a Shopify app that adds blocks, upsells, surveys, payment and shipping rules, order validation, and branding to a store's checkout, thank you, and order status pages. It is built by TreStack ("we", "us") and runs at cplus.trestack.app. This privacy policy describes what the App collects, why, how long it keeps it, and the choices merchants and their customers have. For TreStack Timer and for trestack.app itself, see the main privacy policy at trestack.app/privacy.

For the personal information of your store's customers, you are the controller and we act as your processor (service provider): you decide to install the App, and we process that information only to run it for you. The data processing agreement at trestack.app/checkout/dpa sets out those terms.

When you install the App, Shopify gives it access to your store through the access scopes it requests. They let it read your store's languages (read_locales) and products (read_products); create the payment and delivery customizations and checkout validations you set up (write_payment_customizations, write_delivery_customizations, write_validations) and the discounts that price your upsells (write_discounts); run its web pixel (write_pixels, read_customer_events); read orders, receiving only the order id, for survey answers (read_orders); and read product listings, stock, tags, and subscription options from checkout blocks (unauthenticated_read_product_listings, unauthenticated_read_product_inventory, unauthenticated_read_product_tags, unauthenticated_read_selling_plans). Some scopes are asked for inside the App and you may refuse them: editing orders, to save buyers' answers on the order (write_orders); reading shipping method names (read_shipping); reading a signed-in customer's tags for a Customer Tag condition (read_customers); and reading and saving checkout branding and listing your image and font files (read_checkout_and_accounts_configurations, write_checkout_and_accounts_configurations, read_files).

From your store we keep your store domain and id, store name, contact email, currency, primary language, your store's languages, and plan type (for example whether it is a Shopify Plus or a development store); the access tokens Shopify issues, stored encrypted; the content you create in the App, meaning block settings and their translations, upsell and gift offers, post-purchase offers, surveys, payment and shipping customizations, order validations, cart links, and branding choices (the branding values themselves are saved in your store's Shopify checkout settings); and your plan and the subscription identifiers from Shopify's billing. If you send feedback from the App's Home page, we keep its rating, its text, and the reply email address if you choose to give one. If you cancel your plan, we also keep the reason you pick. If you use the live chat in the App's admin, the chat provider receives your store's myshopify domain and plan, and whatever you write in the chat.

About your buyers: your payment, shipping, and validation rules run as Shopify Functions on Shopify's servers, and some blocks run in the buyer's browser. They may use a buyer's customer tags, email, phone, name, or address only to decide whether a rule or block applies, and the App does not store these values. One exception reaches the App: when a custom input uses a Customer Tag condition, the App reads the signed-in customer's tags from Shopify to make that decision, and keeps nothing.

When a buyer answers a survey or form you built, the App keeps the answers with the order's id and number. What a survey asks is up to you, so answers may contain personal information the buyer chose to give. If you turn on Keep buyers' email addresses with survey answers, the App also keeps the order's email address. For orders with upsells or post-purchase offers, the App keeps the order id and number and the products, quantities, and revenue of those offers. Order webhooks are limited to the order id: no customer fields are sent to the App.

What a buyer types into your checkout inputs, such as a gift message, delivery instructions, or a checkbox, is saved in your store's own Shopify order data as the order note, order attributes, or order fields. The App's servers do not keep it.

  • Web pixel: a Shopify web pixel that runs only for buyers who have allowed analytics under your store's consent settings (Shopify Customer Privacy). When a buyer sees, adds, or buys an upsell, it sends the upsell, product, and order ids, the product title, price, and currency, and a timestamp. It never sends a name, email, phone number, address, or payment information
  • Order data: the order id and the fields listed above, from Shopify's order webhook, with customer fields excluded
  • Review stars: to show a product's star rating in checkout, the App reads the rating and review count that your reviews app saved to your Shopify product data. No buyer information is involved and nothing is sent to the reviews app
  • Log files: like any web server, ours records each request. The request log holds the path and status, never request bodies or query strings, and never access tokens, session tokens, or buyers' emails. It is kept for about 14 days

We use this information only to provide the App's features (blocks, upsells, gifts, post-purchase offers, surveys, rules, branding, analytics, and review stars), to bill you through Shopify, to keep the App secure and working, including abuse prevention, rate limits, and troubleshooting, and to answer your feedback and support requests by email and live chat.

We may write to your store's contact email about the App itself, such as billing, a change to this policy, or a security matter. We do not sell personal information, and we do not use it for advertising.

We share information only with the service providers that help us run the App, each only for the service it provides, under contracts that limit their use of the data to that service:

Shopify
The platform the App runs on. Its APIs, Functions, and billing run the App, and Shopify bills your plan.
Onidel Cloud
Hosts the server the App, its database, and its cache run on, in the United States.
Cloudflare
Carries requests to cplus.trestack.app. Its R2 storage holds the App's backups, encrypted before they leave our server.
Chaport
Runs the live chat inside the App's admin, never in your checkout. It receives your store's myshopify domain and plan, and the messages you write in the chat.
  • We may also share information when the law requires it, or to protect our rights, our users, or the public
  • If TreStack or the App is sold or merged, your information moves with it under this policy

You can view and delete your App content from within the App and uninstall at any time; uninstalling starts the deletion described below. To exercise other rights under the law that applies to you, such as access, correction, deletion, portability, or objection, write to us at the address below. Buyers should contact the store they bought from, which can ask us directly or through Shopify. We respond within the time the law requires, for example 30 days under the GDPR.

We operate the App from Vietnam, and its servers are in the United States. Where personal information is transferred out of the European Economic Area, the United Kingdom, or Switzerland, we rely on the European Commission's Standard Contractual Clauses or another lawful transfer mechanism.

Retention: raw analytics events are deleted after 90 days. Daily statistics and upsell order records are kept while the App is installed. Survey answers are kept until you delete the survey, a customer's deletion request, or the store's. When you uninstall, the App's access token is deleted at once, and Shopify's shop redaction request, sent 48 hours later, deletes all of your store's data. A customer redaction request from Shopify deletes that customer's survey answers, by their orders and by their email address. A customer data request is shown to you in the App with the customer's orders that have survey answers, so you can export them and answer the customer.

We protect your information with HTTPS on every connection, access tokens encrypted by the App before they are stored, backups encrypted before they leave the server, a check of Shopify's signature on every request Shopify sends us, Shopify's session token on every request from a checkout block, and access to production systems limited to the people who operate the App. If a breach affects your store's data, we will tell you without undue delay.

The App is a business tool and is not directed at children under 16.

We may update this privacy policy. We will post the new version at this address and update the date above, and for a material change we will tell you inside the App.

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, contact us by email or by mail using the details below.

Entity
TreStack is an early-stage startup and is not yet a registered company.
Postal address
40 Nguyen Huu Tho, Hoa Cuong, Da Nang, Vietnam
Privacy requests
legal@trestack.app
Support
support@trestack.app, or the live chat inside the App's admin

Questions about this document go to legal@trestack.app and are answered by the people who wrote the app.