Privacy Policy

CreditGuard is an embedded Shopify Admin application that helps merchants manage B2B credit limits, monitor outstanding balances and invoice due dates, enforce credit limits at checkout, and automate payment-related notifications.

•Data controller / contact: CreditGuard

•Email: developers@ceyone.net

When you install the App, we request access to your Shopify store data through the Shopify Admin API. We only collect the data necessary to provide the App's functionality.

a. Store and account information

•Store domain (myshopify.com URL), store name, and store/shop ID

•Shopify session and authentication tokens (used to securely connect to your store)

•App subscription and plan tier (e.g., Starter, Premium)

b. B2B and commerce data

•B2B companies and company locations (names, IDs, contacts associated with the company)

•Orders and draft orders (order numbers, amounts, currency, dates, status, payment terms)

•Credit limits, outstanding balances, transaction history, and payment due dates

•Metafields and metaobjects used to store credit-related configuration

c. Usage and operational data

•Logs of app events such as credit checks, blocked checkout attempts, invoice status changes, and notification triggers (used for functionality, troubleshooting, and support)

We do not intentionally collect payment card numbers or buyer financial account credentials. Payment processing is handled by Shopify and its payment providers.

We use the information we collect to:

•Provide, operate, and maintain the App's features (credit limit tracking, checkout enforcement, invoice monitoring, and dashboards)

•Calculate and display credit availability, outstanding balances, and utilization

•Send automated notifications and trigger Shopify Flow events (e.g., credit order blocked, payment due today, payment overdue)

•Respond to support requests and communicate with you about the App

•Detect, prevent, and address technical issues, fraud, or misuse

•Comply with legal obligations

We do not sell your data, and we do not use your data for advertising.

We may share information only in the following circumstances:

•Shopify: The App operates within the Shopify platform and exchanges data with Shopify's APIs to function.

•Service providers / sub-processors: We use trusted third-party service providers to operate the App, including providers of cloud hosting and infrastructure, database services, and application monitoring and logging. These providers process data only on our behalf and under contractual obligations consistent with this Privacy Policy. A current list of our sub-processors is available on request.

•Legal requirements: We may disclose information if required by law, regulation, legal process, or governmental request.

•Business transfers: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

In the course of providing the App to you, we may process information about your B2B buyers and their companies (such as company names, locations, order details, and payment status). We process this data solely to provide the App's functionality to you, the Merchant. You are responsible for ensuring you have an appropriate legal basis and privacy notice for your buyers regarding this processing.

We retain your data only as long as necessary to provide the App and as required by law.

•While the App is installed, we retain your store and credit data to provide ongoing functionality.

•If you uninstall the App, checkout enforcement is removed immediately, and your credit data (companies, locations, limits, and transaction history) is retained for 30 days. If you reinstall within that window, your data is restored. After 30 days, the data is permanently deleted.

•We may retain certain records longer where required for legal, accounting, or compliance purposes.

We implement reasonable technical and organizational measures to protect your information, including encrypted connections (HTTPS/TLS), access controls, and secure cloud infrastructure. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your information may be processed and stored in countries other than the one in which you reside. Where data is transferred internationally, we take steps to ensure it is protected in accordance with applicable data protection laws.

Depending on your location, you may have rights regarding your personal data, including the right to access, correct, delete, or restrict the processing of your data, or to request a copy of it. To exercise these rights, contact us at developers@ceyone.net.

Shopify also provides mandatory data privacy webhooks. Upon request through Shopify (for data access, redaction, or shop redaction), we will respond in accordance with Shopify's requirements and applicable law.

•EEA/UK (GDPR): Our legal basis for processing is the performance of our contract with you and our legitimate interests in operating and improving the App. For buyer data, we act as a data processor on your behalf.

•California (CCPA/CPRA): We do not sell or share personal information as defined by the CCPA. California residents may request disclosure or deletion of their personal information by contacting us.

The App is intended for business use by merchants and is not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. We will post the updated version with a revised "Last updated" date. Continued use of the App after changes take effect constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy or our data practices, contact us at:

•CreditGuard

•Email: developers@ceyone.net