Privacy Policy
This policy describes how The Cookie Mercantile ("we") handles data when a store installs Custom Cutter Studio (the "app").
Who we are
The Cookie Mercantile. Contact: hillcoreyj@gmail.com.
What the app does with data
The app lets a store's customers upload artwork and receive a generated cutter design, and lets the store owner download the design files for orders.
Data we store
- Store data: the store's
*.myshopify.comdomain, the store's cutter settings, its subscription plan, and when the app was installed or uninstalled. - Design data (from a store's customers): the image a customer uploads, the size and any text they choose, and the STL files generated from it. A random design token links a design to the cart line it was added to. We do not store the customer's name, email address, phone number or postal address.
- Order data: when an order contains a design, we keep the Shopify order number, order date, quantity, and whether the store marked it fulfilled or it was cancelled, plus the amount of any usage fee we charged for it.
Data we do not store
Customer names, email addresses, phone numbers, addresses, payment information, or browsing history. The app requests access to orders only to link a design to an order number and to calculate the usage fee for the store's plan.
How long we keep data
- Designs that are never ordered are deleted automatically after 45 days.
- Designs on orders are kept while the store uses the app.
- When a store uninstalls the app, Shopify notifies us 48 hours later and we delete all data held for that store, including images, files, settings and order links.
- Database backups are kept for 14 days, so deleted data can remain in a backup for up to 14 days before it is permanently gone.
Where data is kept and who can see it
Data is stored on Northflank (US Central region) servers in the United States and is only accessible to the store that owns it and to us for support and operation. We do not sell data or share it with third parties, other than the infrastructure providers that host the app.
Customer privacy requests
Because we hold no personal information about a store's customers, requests from Shopify for customer data or customer erasure are acknowledged with nothing to return or delete. A customer who wants an uploaded image removed can ask the store, or contact us at hillcoreyj@gmail.com with the store name.
Your rights
Store owners can request a copy or deletion of their data at any time at hillcoreyj@gmail.com.
Changes
We will post changes here and update the date above.