Privacy policy

Prepsheet is a Shopify app that turns a store's orders into a daily prep list: how many of each product and variant to prepare for each pickup or delivery date. This policy explains what data the app reads, what it keeps, and how it is deleted. It applies to merchants who install Prepsheet and to their customers, whose orders the app reads on the merchant's behalf.

Prepsheet is developed and operated by Bin Rozenblum ("we"). For anything in this policy, write to support@binrozenblum.co.il.

What the app reads from your store

Prepsheet asks Shopify for one permission: read orders. It cannot change anything in your store. From orders created in the last 60 days, excluding cancelled orders, it reads only:

• the order number, creation date and fulfillment status;
• the order note;
• order attributes ("Additional details"), where pickup and delivery date apps save the date and time slot;
• for each line item: product title, variant title, SKU, quantity and line item properties (for example a custom message on a cake).

Prepsheet does not request customer names, email addresses, phone numbers, shipping or billing addresses, or payment details.

Order notes and line item properties are free text written by your customers or your staff, so they can contain whatever was typed in them. Prepsheet shows them to you as they are and does not analyze, profile or reuse them.

The app also reads basic store details: store name, domain, timezone, the country of the store's billing address, and your Prepsheet plan.

How the data is used

Only to provide the app's features to you: the prep list, the printable prep sheet, the CSV export and the "Detected keys" panel in Settings. We do not use store or customer data for advertising, for building profiles, or to train any model, and we do not combine it with data from other stores.

What we store, and for how long

• Orders are not stored. They are read live from Shopify each time the prep list is built and kept in the server's memory for about 90 seconds, so that switching between dates is fast. They are never written to a database or file.
• Your settings: one record per store with your Prepsheet settings, your store name, timezone, country and last known plan.
• Shopify access token: the credential Shopify issues when you install the app, needed to read orders on your behalf.
• Server logs: technical logs record the store domain, the time and the type of request or error. They never include order contents. Web server access logs are deleted after 14 days.

Your settings and access token are kept while Prepsheet is installed and are deleted as soon as you uninstall it.

Print and CSV

The print view and the CSV file open from links that are signed for your store and expire after 2 hours. Once you print or download the list, that copy is under your control.

Who we share data with

We do not sell, rent or trade any data. We share data only with the service providers that run the app, and only as needed:

• Shopify, the platform the app runs on, which also handles billing.
• DigitalOcean, which hosts the app server and its database in Frankfurt, Germany.

We may disclose data if the law requires it, and we will tell you unless we are not allowed to.

Deletion and privacy requests

• Uninstalling Prepsheet deletes your settings and access token right away.
• Shopify's shop data erasure request, sent 48 hours after you uninstall, deletes anything that is left.
• Shopify's customer data request and customer data erasure requests: Prepsheet does not store customer data, so there is nothing to report or delete. An erasure request also clears any orders still held in memory.

For your customers, you, the merchant, decide how their data is used, and Prepsheet processes it on your behalf. If a customer asks you to access or delete their data, the requests above cover Prepsheet. You can also write to us and we will help.

As a merchant, you can ask us at any time to access, correct or delete the data we hold about your store, including under the GDPR or the CCPA. We answer within 30 days.

Security

All traffic is encrypted with HTTPS. The app has read-only access to orders. The database is not reachable from the internet, and access to the server is limited to the developer. If a security incident ever affects your data, we will tell you and Shopify without undue delay.

Changes to this policy

If we change how Prepsheet handles data, we will update this page and its date. For significant changes we will tell you in the app before they take effect.

Contact

Questions, requests or complaints: support@binrozenblum.co.il.

See also the Terms of service.