Privacy Policy

This app generates certificates of authenticity, care cards, and maker's notes for merchants who sell individual or numbered handmade pieces, and delivers them to the merchant's customers.

From the merchant (store owner), we collect and store:

• Their Shopify store domain
• Their maker/brand name, brand colour, logo and signature image links, care instructions, and personal note text — entered voluntarily in the app's Maker Profile screen
• Which products they've chosen to generate certificates for
• Their app plan (free or paid) and billing status

From customers, we collect and store only what's needed to generate and address a certificate:

• Name
• Email address
• The order number and product the certificate relates to

We don't collect payment details. Merchants may also enter a manufacturer's business address and other product information when setting up a public product passport.

Public product records are separate from private customer links. The merchant chooses the product information to publish and confirms publication. Published details can be viewed and downloaded by anyone with the public passport address. Customer names, order details, private certificates and supporting evidence are not automatically copied into that record.

We store draft details, private evidence references and published revisions for the merchant. Withdrawing a passport removes public access; it does not erase the stored revisions. Customer erasure removes the association between that customer’s piece and the public record. Shop erasure removes that shop’s public records and revisions as well. Contact the merchant or us if personal information has been entered into a product record by mistake.

Customer information is used solely to generate a certificate addressed to the right person and, if the merchant has enabled it, to email that certificate to the customer. We don't use customer data for marketing, and we don't sell or share it with third parties, except the service providers below who are necessary to run the app.

• Shopify — hosts the app and provides the store and product information the app is built on.
• Resend — delivers the certificate emails to customers on the merchant's behalf.

We keep a shop's data for as long as the app is installed. If a merchant uninstalls the app, we permanently delete all of that shop's data — maker profile, certified products, and every certificate record and file — shortly after uninstall.

If you're a customer and want to see what data we hold about you, or want it deleted, contact the store you purchased from, or reach us directly (below) and we'll action the request within 30 days.

Questions about this policy or a data request: hello@cl-apps.net