Privacy Policy

Alfred Commerce ("we," "us," or "our") operates three Shopify apps, available through the Shopify App Store, and the website at alfredcommerce.com:

• Alfred Purchase Orders — purchase orders, forecasting, and inventory management
• Alfred Launch Scheduler — scheduled storefront changes such as theme activations, product status, and price updates
• Alfred Order Edits (listed on the Shopify App Store as "Alfred Order Edit & Cancel") — lets your customers change or cancel their own orders before they ship, under rules you set

In this policy, "Alfred" and "the Service" refer to all three apps and our website together. Sections 1, 2 and 4 to 14 apply to every app. Section 3 sets out, app by app, what store data each app accesses and why. Where a statement applies to only one app, we name it.

This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use Alfred. It applies to all merchants ("you" or "your") who install, access, or interact with any of our apps, our website, or related services.

Your customers' personal data. Alfred Purchase Orders and Alfred Launch Scheduler do not process personal data about your customers. Alfred Order Edits does, because a customer can only change their own order if the app can read it. For that data, you (the merchant) are the controller and Alfred Commerce is your processor: we process it only to provide Order Edits to you, on your instructions, under our Data Processing Agreement. If you are a customer of a store that uses Order Edits, please contact that store about your data; we will help the store respond.

By using Alfred, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the Service.

When you install an Alfred app via the Shopify App Store, we collect account information provided through Shopify OAuth, including:

• Shopify store name and store URL
• Store owner name
• Email address associated with your Shopify account
• The name and email address of store staff who open the app, as Shopify provides them when a staff member signs in

To provide each app's features, we access data from your Shopify store via Shopify APIs. Each app requests only the permissions it needs. Section 3 lists what each app accesses.

We may automatically collect information about how you and your staff interact with our apps' admin screens, including:

• Pages visited and features used within the application
• Clicks, navigation patterns, and session duration
• Device and browser information (IP address, browser type, device type, operating system)
• When we show you a recommendation for another Alfred app, whether it was shown, clicked, or dismissed

This describes merchant usage only. Section 3.3 explains what Alfred Order Edits records about your customers' visits to its pages, which is much narrower.

If you visit our marketing website (alfredcommerce.com), we may collect data through cookies and tracking pixels for advertising purposes, including information about your visit, referral source, and interactions with our website content.

If you join the Alfred Order Edits launch waitlist, we collect your email address and use it for Order Edits launch updates with your consent. Resend stores the email and waitlist membership on our behalf. We keep that membership while the waitlist and launch updates are active, until those updates finish or you withdraw. Existing unsubscribe preferences are respected. You can leave the waitlist or request deletion at any time by contacting alfredcommerceapps@gmail.com, including before you receive an email. An unrelated active email subscription may be retained separately for its own purpose.

Alfred Purchase Orders accesses:

• Product catalog information
• Sales and order history
• Inventory levels
• Location data (warehouse/store locations)
• Supplier information

It uses this data for inventory tracking, demand forecasting, Purchase Plan generation, restock alerts, and to determine your billing tier. It processes order data only in aggregate and does not access, collect, or store personal data about your customers, such as their names, email addresses, shipping or billing addresses, or payment details.

Alfred Launch Scheduler accesses the store content you choose to schedule changes to, such as themes, products and prices, discounts, collections, navigation menus, pages, and blog posts, along with the details of the launches you create. It uses this data only to run the changes you schedule at the times you set. It does not access, collect, or store personal data about your customers.

Alfred Order Edits lets your customers, your staff, and support agents you connect change or cancel orders before they ship, within the rules you set. To do that it accesses the following through Shopify's APIs:

• Orders: line items, prices, discounts, taxes, shipping, payment status, refunds and transactions, and the order's fulfillment orders and holds
• Customer details on an order: the customer's name, email address, phone number, and shipping address, and the ID of the customer who placed it
• Products: the variants, prices and availability a customer can swap to or add
• Store setup: your store's plan, navigation menus, pages and published theme, so the app can show you where to add the "Edit or cancel order" link

It does not access billing addresses or payment card details. Balances are paid through Shopify's own payment page, and refunds are issued through Shopify.

The app uses this data to:

• Show a customer their order and the changes your settings allow, and confirm they own it before any change
• Make the change in Shopify: edit items, quantities, shipping method or shipping address, cancel the order, refund any overpayment, or request payment of a balance
• Place and release its own fulfillment holds so an order isn't shipped while it can still be changed
• Email the customer what Shopify cannot send for you: their edit link, a confirmation when their shipping address changes, a list of their orders when they look them up by email, and notice that a cancel request was received or declined, if you review cancel requests before they happen, and an explanation when an order is cancelled or a change is undone because a balance wasn't paid. Shopify sends its own notifications for item edits, cancellations and payment requests. These emails come from our shared sending address, or from your own domain once you verify it in the app
• Check a new shipping address that a customer types, using Google's address validation and autocomplete
• Answer support agents you connect (see below), and count edits for billing
• Send order edit events to the email or marketing platforms you connect (see below)

Platforms you connect

You can connect Order Edits to Klaviyo, Omnisend, or a webhook URL of your own. When you do, we send that platform events about your customers' orders, such as an edit window opening (with the customer's edit link and deadline), an order being edited or cancelled, and a payment being needed. These events include the customer's email address, because that is how the platforms identify a customer. You choose whether to connect a platform, and what it does with the data is governed by your agreement with it. We store your platform credentials encrypted, sign webhook requests, and delete the contents of each event 7 days after it is delivered.

AI support agents (Agent API and MCP)

You can connect a support agent, such as an AI helpdesk agent, to Order Edits with an API key you create in the app. An agent must supply the order number and the email address on the order. It can read your edit policy, see which changes are still allowed, price a change, and read an order's edit history. If you allow it, it can ask us to send the customer an edit link. That link is only ever emailed to the email address on the order, and is never returned to the agent. Agents cannot change an order themselves. We log each call's tool, outcome and order ID, not the request contents.

What we store, and for how long

Order Edits reads most customer details from Shopify when it needs them rather than keeping a copy. What it does store is limited and deleted on a schedule:

• A requested change and its preview (which can include a name, address, and phone number): deleted 1 hour after an abandoned preview expires, or 30 days after the change is made
• The before and after of each address change, kept as your edit history: deleted 90 days after the order was placed
• The recipient and contents of emails we send: deleted 30 days after sending
• Order webhooks Shopify sends us: deleted after 7 days
• Events sent to platforms you connect: contents deleted 7 days after delivery
• Address validation results: deleted after 30 days at most, as Google's terms require. These hold the address only, never a name or phone number
• Whatever its state, no stored customer detail is kept more than 90 days after it was created. The one exception is a privacy request from Shopify (Section 9) that hasn't been carried out yet, which we keep until it has

We keep order IDs, edit records (what kind of change, when, and who made it) and billing counts without customer details. We also keep the visitor's IP address briefly, only to rate-limit requests, and email addresses as one-way hashes so a link can be checked against the order.

We do not use your customers' data for our own purposes, to market to them, or to build profiles. Order Edits does not set cookies on your storefront, and does not send customer names, email addresses, addresses, or phone numbers to our analytics or error-monitoring tools.

We use the information we collect to:

• Provide and operate Alfred's features: as described for each app in Section 3
• Determine your billing: for Alfred Purchase Orders, we calculate your trailing 60-day net sales (annualized) to assign the appropriate pricing plan; for Alfred Order Edits, we count the edits made on your store
• Send transactional communications: inventory alerts, low-stock notifications, Purchase Plan reminders, launch completion and failure alerts, Order Edits emails to your customers on your behalf (Section 3.3), and product updates
• Recommend our other apps: if you use one Alfred app, we check by your store's domain whether it also has our other apps installed, so we don't recommend an app you already use and can tell whether a recommendation led to an install. Only the store domain, install status, and install date pass between our apps, never your store data or your customers' data
• Improve our product: via anonymized analytics, session recordings of our admin screens, and aggregated usage patterns. Never your customers' personal data
• Ensure security and prevent abuse: monitoring for unauthorized access or fraudulent activity
• Communicate with you: respond to inquiries, provide customer support, and send important service updates

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we process your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide the Service you have requested, including accessing your Shopify store data to deliver each app's features and determining your billing.
• Legitimate Interest: Processing necessary for our legitimate business interests, such as improving our Service through anonymized analytics and session recordings, ensuring application security, monitoring for errors and downtime, and recommending our other apps to stores that don't already have them installed (including recording whether a recommendation was shown, clicked, or dismissed). We balance these interests against your rights and freedoms.
• Consent: Where required, we obtain your consent for specific processing activities, such as marketing communications and the use of non-essential cookies and tracking pixels. You may withdraw your consent at any time.

For your customers' personal data in Alfred Order Edits, you are the controller and decide the legal basis. We process that data as your processor, under the Data Processing Agreement.

We share data with the following categories of third-party service providers, solely to operate and improve the Service:

Shopify

Alfred integrates with Shopify APIs as its core data source. Your store data is accessed in accordance with Shopify's API Terms of Service and Partner Program Agreement.

Subprocessors for Alfred Order Edits

These providers process your customers' personal data for Order Edits, only as needed to run the app:

• Google Cloud (Cloud Run, Cloud SQL, Cloud Tasks, Secret Manager, Cloud Logging): hosting, database, background jobs and secrets, in the United States
• Google Maps Platform (Address Validation API, Places API): receives a shipping address only when a customer types a new one on the edit page, to check it and suggest corrections. Never names or phone numbers
• Amazon Web Services (Amazon SES): sends the emails described in Section 3.3, so it receives the recipient's email address and the email's contents. Processing takes place in the United States (US East, Ohio). We store no email content in AWS and SES keeps no copy of message bodies; message-level metadata — sender, recipient address and subject line — is kept by AWS for up to 30 days so an individual message can be traced. The delivery, bounce and complaint records we keep ourselves hold identifiers only
• Resend: sends the same emails for Alfred apps that have not yet moved to Amazon SES. We are consolidating transactional email onto Amazon SES for app notifications. Resend also stores website launch-waitlist emails as described in Section 2.4 and remains disclosed for that purpose after the transactional-email migration
• Shopify: the source of the data, and where every change is made

Order Edits also uses these tools, none of which receive your customers' names, email addresses, addresses, or phone numbers:

• Sentry for error monitoring. Error reports are rebuilt from an allowlist of store IDs, order IDs and error codes before they leave our servers
• PostHog for product analytics. In the admin it records how you and your staff use the app; on the pages your customers use, and for support agent calls, events are sent from our servers keyed by store and order IDs only, with no cookies
• UptimeRobot to check that the app is up. It sees our endpoints, not your data

Between Our Own Apps

Our apps are all operated by Alfred Commerce. The install check described in Section 4 ("Recommend our other apps") happens between our apps only; no third party is involved, and only your store domain, whether the app is installed, and when it was installed are exchanged.

Advertising Platforms

We use third-party advertising platforms (such as social media networks, search engines, and other digital advertising services) to market Alfred to prospective merchant users. These platforms may receive data through cookies and tracking pixels placed on our marketing website.

Important: These advertising tools are used solely to reach prospective merchants. They do not process or receive any data about your end customers.

Analytics, Monitoring & Product Improvement

We use third-party tools and services to monitor, analyze, and improve Alfred, including but not limited to:

• Application uptime and downtime monitoring
• Error tracking and debugging
• Session recordings of our apps' admin screens (for product improvement)
• Anonymized user behavior analytics

None of these tools receive your customers' personal data.

Communications & CRM

We use third-party email, messaging, and customer relationship management tools to send transactional communications (such as inventory alerts and product updates) and manage merchant relationships.

Hosting & Infrastructure

We use third-party hosting, cloud computing, and infrastructure providers to run and maintain the Service. These providers may process your data on our behalf under strict contractual obligations.

Business Transactions

If Alfred Commerce is involved in a merger, acquisition, asset sale, financing, bankruptcy, or reorganization, your data may be transferred or disclosed as part of that transaction. We will notify you (via email or a prominent notice within the Service) before your data becomes subject to a different privacy policy.

Legal Disclosure

We may disclose your data if required to do so by law, regulation, legal process, or governmental request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to a government request.

We do not sell your personal data, or your customers' personal data, to third parties. We only share data as described in this section and as necessary to comply with legal obligations.

We use the following types of cookies and tracking technologies:

• Essential Cookies: Required for the application to function properly, including authentication, session management, and security. These cannot be disabled.
• Analytics Cookies: Used to understand how merchants interact with Alfred so we can improve the product experience. These collect anonymized usage data.
• Marketing Cookies & Pixels: Used on our marketing website (alfredcommerce.com) for advertising purposes. These help us measure the effectiveness of our advertising campaigns and reach prospective merchants. We may use pixels and tracking technologies from various advertising platforms.

Alfred Order Edits does not set cookies on your storefront or on the pages your customers use to change their orders.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may impair the functionality of the Service.

Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) setting. There is currently no universally accepted standard for how companies should respond to DNT signals. We do not currently respond to DNT signals, but we respect your ability to control tracking through your browser's cookie settings and the opt-out mechanisms described in this policy.

All data collected by Alfred is stored on servers located in the United States.

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Access limited to authorized staff, each signing in with two-factor authentication, and each app running under its own least-privilege service account
• Logging of administrative actions and of access to the database that holds your customers' data
• Secrets and API keys kept in a dedicated secrets manager, never in source code or logs
• Regular security assessments and monitoring
• Secure authentication via Shopify OAuth

Section 9 explains how long we keep data and when we delete it.

Payment security: Alfred does not collect, store, or process payment card information. All billing is handled through Shopify's billing API, which is PCI-DSS compliant. We never have access to your credit card or payment details, or your customers'.

While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to maintaining reasonable safeguards appropriate to the sensitivity of the data.

We retain your data for as long as you maintain an active subscription to Alfred. Upon cancellation or uninstallation of the application:

• Your store data and account information will be deleted within 90 days of subscription termination, unless retention is required by law
• Anonymized, aggregated data that cannot be used to identify you may be retained indefinitely for product improvement purposes
• Billing records may be retained as required for tax, legal, or accounting obligations

Records of whether an app recommendation was shown, clicked, or dismissed are kept for 12 months and then deleted. When Shopify sends its shop-redact request after you uninstall an app, we delete all of your store's data held by that app, including these recommendation records.

Your customers' data in Alfred Order Edits is kept only for the periods in Section 3.3, and is deleted sooner on these requests from Shopify:

• customers/redact: when you or Shopify ask us to erase a customer, we erase or clear every stored record about that customer and their orders
• shop/redact: 48 hours after you uninstall, Shopify asks us to erase your store, and we delete all of its Order Edits data. If the app has been reinstalled in the meantime, we don't erase an active installation's data
• customers/data_request: when a customer asks you for their data, we find what we hold for them and provide it to you so you can respond, within the 30 days Shopify allows

Deleted data can remain in our encrypted database backups for up to 30 days until those backups expire. We don't restore it from backups except to recover from a failure.

You may request earlier deletion of your data at any time by contacting us at alfredcommerceapps@gmail.com.

Depending on your location, you may have the following rights regarding your personal data:

General Rights

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data
• Portability: Request a machine-readable copy of your data
• Opt-out of Marketing: Unsubscribe from marketing communications at any time via the unsubscribe link in our emails or by contacting us

Additional Rights Under GDPR (EEA/UK/Switzerland)

• Restriction of Processing: Request that we limit how we use your data
• Object to Processing: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw previously given consent at any time
• Lodge a Complaint: File a complaint with your local data protection authority

Additional Rights Under CCPA (California Residents)

• Right to Know: Request disclosure of the categories and specific pieces of personal information collected about you
• Right to Delete: Request deletion of personal information collected about you
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights
• Right to Opt-Out: We do not sell your personal information. If this changes, we will provide a "Do Not Sell My Personal Information" option

To exercise any of these rights, please contact us at alfredcommerceapps@gmail.com. We will respond to your request within 30 days (or within the timeframe required by applicable law).

If You Are a Customer of a Store Using Alfred Order Edits

The store you bought from controls your data and is the right place to make a request. When the store forwards a request through Shopify, we act on it as described in Section 9. If you contact us directly, we will pass your request to the store.

Your data, and your customers' data processed by Alfred Order Edits, is stored and processed in the United States. If you are accessing Alfred from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Where required by applicable law, we implement appropriate safeguards for international data transfers, such as Standard Contractual Clauses (SCCs) approved by the European Commission, to ensure your data receives an adequate level of protection.

Alfred is a business-to-business service designed for Shopify merchants and is not directed at children under the age of 16 (or 13, where applicable under local law). We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child without appropriate consent, we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Effective Date" at the top of this page
• Notify you via email or through a prominent notice within the Service

We encourage you to review this Privacy Policy periodically. Your continued use of Alfred after any changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: