DraftHelper/data.html at master · YagiSoftware/DraftHelper · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
<!doctype html>
<html>
<head>
  <meta charset="UTF-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
  <link href="style.css" rel="stylesheet">
  <title>Data Protection Agreement</title>
  <!-- Include CDN JavaScript -->
  <!-- <script src="https://unpkg.com/tailwindcss-jit-cdn"></script> -->
</head>
<body>
  <div class="relative py-16 bg-white overflow-hidden">
    <div class="hidden lg:block lg:absolute lg:inset-y-0 lg:h-full lg:w-full">
      <div class="relative h-full text-lg max-w-prose mx-auto" aria-hidden="true">
        <svg class="absolute top-12 left-full transform translate-x-32" width="404" height="384" fill="none" viewBox="0 0 404 384">
          <defs>
            <pattern id="74b3fd99-0a6f-4271-bef2-e80eeafdf357" x="0" y="0" width="20" height="20" patternUnits="userSpaceOnUse">
              <rect x="0" y="0" width="4" height="4" class="text-gray-200" fill="currentColor"></rect>
            </pattern>
          </defs>
          <rect width="404" height="384" fill="url(#74b3fd99-0a6f-4271-bef2-e80eeafdf357)"></rect>
        </svg>
        <svg class="absolute top-1/2 right-full transform -translate-y-1/2 -translate-x-32" width="404" height="384" fill="none" viewBox="0 0 404 384">
          <defs>
            <pattern id="f210dbf6-a58d-4871-961e-36d5016a0f49" x="0" y="0" width="20" height="20" patternUnits="userSpaceOnUse">
              <rect x="0" y="0" width="4" height="4" class="text-gray-200" fill="currentColor"></rect>
            </pattern>
          </defs>
          <rect width="404" height="384" fill="url(#f210dbf6-a58d-4871-961e-36d5016a0f49)"></rect>
        </svg>
        <svg class="absolute bottom-12 left-full transform translate-x-32" width="404" height="384" fill="none" viewBox="0 0 404 384">
          <defs>
            <pattern id="d3eb07ae-5182-43e6-857d-35c643af9034" x="0" y="0" width="20" height="20" patternUnits="userSpaceOnUse">
              <rect x="0" y="0" width="4" height="4" class="text-gray-200" fill="currentColor"></rect>
            </pattern>
          </defs>
          <rect width="404" height="384" fill="url(#d3eb07ae-5182-43e6-857d-35c643af9034)"></rect>
        </svg>
      </div>
    </div>
    <div class="relative px-4 sm:px-6 lg:px-8">
      <div class="text-lg max-w-prose mx-auto">
        <h1>
          <!-- <span class="block text-base text-center text-indigo-600 font-semibold tracking-wide uppercase">Introducing</span> -->
          <span class="mt-2 block text-3xl text-center leading-8 font-extrabold tracking-tight text-gray-900 sm:text-4xl">Data Protection Agreement
          </span>
        </h1>
        <p class="mt-8 text-xl text-gray-500 leading-8">
          DraftHelper Data Protection Agreement
          <br><br>
          <strong>DraftHelper</strong> "the App” provides draft order editing service (including checkout link generation, applying discount, rearranging line items and editing line item properties) "the Service" to merchants who use Shopify to power their stores. This Data Protection Agreement describes what data is collected, used, and stored in database when you install or use the App in connection with your Shopify-supported store.
        </p>
        <article class="mt-8 text-xl text-gray-500 leading-8">
          <h3 class="text-2xl font-semibold">Personal Information the App Collects</h3>
          When you install the App, we are automatically able to access certain types of information from your Shopify account:
          <br><br>
          Your shop name and shop contact email, this is only used for support and emergency contact purpose.
          <br><br>
          Your shop's location ID and name, this is only used for when you use the deduct inventory feature, which the app will deduct inventory from the selected location.
          <br><br>
          Draft Orders data, including line items and customers details, this is only used for the app to function.
          <br><br>

          <h3 class="text-2xl font-semibold">Draft Order Information the App Collects</h3>

          For all of the app functions, the app collects information from the draft order, including the line item quantity, line item properties, product ID, product name, product image, product price, variant ID, variant name, variant SKU , inventory item ID, draft order ID, draft order notes and draft order tags.
          <br><br>
          From the information above, only the product ID, variant ID, inventory item ID and draft order ID are stored in the app database, for future identification and access purpose, no other data from the draft order is stored in the app database.
          <br><br>

          <h3 class="text-2xl font-semibold">Checkout Information the App Collects</h3>
          For the "Generate discountable checkout link" / "Checkout link" function, the app collects information from the generated checkout, including the checkout URL and the checkout token. The checkout URL and checkout token is stored in the database, so that the app can display the URL for merchant to see and send to customer to proceed to checkout.
          <br><br>

          <h3 class="text-2xl font-semibold">Customer Information the App Collects</h3>
          For the "Generate discountable checkout link" / "Checkout link" function, in addition to the draft order information mentioned in the previous section, the app also collects the draft order's customer information, including customer name, customer email, customer shipping address and customer billing address.
          <br><br>
          These customer information is needed to generate a checkout, which the checkout will then be populated with the customer name, email, phone number, shipping address and billing address, so the customer will not need to type them again when they access the checkout link generated.
          <br><br>
          These customer information (name, email, phone number, shipping address and billing address) is never stored in the app database, the app will request these information from Shopify every time a checkout link is generated, and they will be discarded once the checkout link is generated, these information are only kept in ephemeral Random Access Memory (RAM) during the generation of checkout link.
          <br><br>

          <h3 class="text-2xl font-semibold">Data Retention Period</h3>
          For customer data (customer name, email, phone number, shipping address and biling address), the data is discarded immediately right after the checkout link is generated, this data is never stored in the database.
          <br><br>
          For the inventory deduction data (location ID, variant ID, inventory item ID, quantity), the data is stored in database until the draft (that is used for inventory deduction) is paid or completed, or until the merchant manually restore the deducted inventory using the app. ie. these data will be removed from the database when the draft order is completed, or when the merchant manually restore the deducted inventory using the app.
          <br><br>
          For the store data (store name and store contact email), the data is stored in database until the user uninstalls the app.
          <br><br>
          For other data that is not mentioned above, they will be purged after 30 days from the database since its creation date.
          <br><br>

          <h3 class="text-2xl font-semibold">Data Security</h3>
          We use HTTPS / TLS 1.3 (AES_128_GCM_SHA256) to encrypt the data in transit for the app, no customer data is ever stored in the database. The database only store the following data : your shop name, your shop contact email, you shop location IDs, product ID, variant ID, inventory item ID, draft order ID, checkout ID and quantity of line items.
          <br><br>
          <h3 class="text-2xl font-semibold">Changes</h3>
          We may update this data protection agreement from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.
          <br><br>
          <h3 class="text-2xl font-semibold">Contact Us</h3> For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e-mail at <strong>axel@draftorder.app</strong> or by mail using the details provided below:
          <br><br>
          Level 30, No.1, Jalan Pinang, 50450 Kuala Lumpur
        </article>
      </div>
    </div>
  </div>

</body>
</html>