Privacy Policy
ShipEmbargo is a Shopify app that lets merchants control where their products can be shipped: blocking products from — or restricting them to — specific US states, countries, and postal codes. This policy explains what data the app handles and how.
What we store
We store data about the store, not its customers: the store's myshopify.com domain, the access token Shopify issues so the app can operate, and the shipping-restriction rules and message templates the merchant creates (product, collection, and tag identifiers, blocked or allowed states, countries and postal codes, and message text).
We also keep a welcome-email delivery record for your store, including its status, timestamps, and the email provider's message identifier when available. To send the welcome email, we read the store owner's email address from Shopify and pass it to Postmark, our email delivery provider. We do not save that recipient address in the app's welcome-email record.
What we do not store
We do not collect, store, or process customer personal information. No customer names, addresses, emails, phone numbers, payment details, or order contents are ever saved by ShipEmbargo. Rule enforcement runs inside Shopify's own checkout infrastructure; the buyer's address is evaluated there by Shopify and is never transmitted to our servers.
How data is used
We use this data to keep your restriction rules synced to your store's checkout and to send an operational welcome email with setup and support information. We do not track email opens or link clicks. We do not sell data, share it with third parties for marketing, or use it for anything beyond operating and supporting the app.
Data deletion
When you uninstall ShipEmbargo, your shop's rules, settings, access credentials, and welcome-email delivery record are deleted automatically from the app's database. We also honor Shopify's standard privacy webhooks: shop data erasure requests are fulfilled automatically, and customer data requests are trivially satisfiable because no customer data exists.
Uninstalling does not automatically delete Postmark's records. Postmark retains email content and delivery logs under the retention settings configured for our account, and may retain suppression records for bounced addresses and spam complaints. Contact us for help with questions or deletion requests relating to these records.
Infrastructure
The app runs on reputable cloud hosting with encryption in transit. Access tokens are stored securely and used only to communicate with Shopify's APIs on your store's behalf.
Contact
Questions about this policy or your data: contact us at support@shipembargo.com.