Last updated: September 29, 2026 Cancel Order & Auto Restock ("we", "our", or "the App") is committed to protecting the privacy of merchants and their customers. This Privacy Policy describes how personal information is collected, used, and handled when you install or use the App in connection with your Shopify store.

1. Information We Collect When you install and use the App, we collect and process certain types of information necessary to deliver our order cancellation services: • Merchant Information: We collect your shop domain (myshopify.com domain) and API access tokens to communicate securely with the Shopify Admin API.
• Order and Customer Information: When a customer requests an order cancellation via the storefront, we process the Order ID, order creation date, order fulfillment status, and the logged-in Customer ID to verify customer ownership and determine cancellation eligibility.
• Cancellation Data: We temporarily store records of cancelled orders, including the associated Order ID, Customer ID, and customer-selected cancellation reasons and feedback.
We do not collect sensitive personal data such as payment card details, passwords, or government identification.

2. How We Use Your Information We use the collected information solely for the following purposes: • To authenticate and verify customer identity for specific orders before processing cancellations.
• To execute order cancellations, issue associated refunds, and trigger automated inventory restocking through Shopify APIs.
• To apply tracking tags (e.g., cancelled:reason) to cancelled orders in your Shopify admin.
• To ensure the operational stability, security, and integrity of the App's services.

3. Sharing and Disclosure We do not sell, rent, or trade personal data to third parties. We share data only in the following limited circumstances: • Shopify Platform: We share data directly with Shopify APIs to execute cancellation requests and synchronize inventory.
• Legal Requirements: We may disclose information if required to comply with applicable laws, regulations, or valid governmental requests.

4. GDPR and Privacy Compliance The App complies with the General Data Protection Regulation (GDPR) and Shopify’s mandatory privacy compliance webhooks: • Customer Data Request: We process and respond to verified customer data requests received through Shopify.
• Customer Data Erasure: When requested by a merchant or customer via Shopify, we redact or remove relevant personal data from our databases.
• Shop Data Erasure: When a merchant uninstalls the App, shop data and associated session records are deleted according to Shopify’s 48-hour compliance requirement.

5. Data Retention and Security • We retain cancellation logs only as long as necessary to provide service transparency and reporting to the merchant.
• All communication between the merchant store, the App, and Shopify is secured via standard HTTPS/TLS encryption.
• Access tokens and database credentials are stored in encrypted, isolated cloud environments.
6. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our operational, legal, or regulatory obligations. Any updates will be reflected with a revised "Last updated" date at the top of this page.

7. Contact Us If you have questions, comments, or data deletion inquiries regarding this Privacy Policy or our practices, please contact us at:

• Email: [email protected]
• App Name: Cancel Order & Auto Restock