Privacy Policy

Who decides about the customers' information

The merchant decides which forms to publish, what they ask and who receives them. For the information customers send, the merchant is responsible for it (the data controller) and we process it on the merchant's behalf, only to provide the app. Customers who want to know how a store uses their information should ask that store.

Information we keep about the store

• Your store's domain (for example, your-store.myshopify.com) and an access token issued by Shopify. The only permission the app asks for is to add and delete files in your store's Files, where it keeps your customers' photos and videos; it also reads your store's name, to sign the emails, and your app subscription.
• Your forms: their titles, fields, messages, case numbering and the email addresses of the people who receive them.
• Your settings: where and for how long customers' files are kept, and the sender name of the emails.

Where the photos and videos are kept

The merchant chooses it in the app's settings:

• In the store's Files on Shopify (the default). Each file is first received and checked on our server, then added to the store's Files (Content → Files) with a random name, never the customer's, and deleted from our server. Shopify serves these files from a public link that does not expire: it can't be guessed, but anyone who has it can open the file.
• On our server (private). The files stay on our server and are only opened through signed links that expire: one hour in the app and 30 days in the emails.

Information customers send through a form

The app keeps what each form asks for and the customer types, which may include:

• Name, email address and phone number.
• An identity document number (for example a Peruvian DNI, foreign resident card, RUC or passport), which the app checks for a valid format.
• An order number, descriptions and any other answer the form asks for.
• Photos and videos the customer attaches.
• The case number, the date, the language of the form and, for the merchant's team, the case's status and an internal note.

The customer's IP address is used for a few minutes, in memory, to limit repeated submissions, and is not stored. The form sets no cookies and does not track the customer.

How we use the information

Only to provide the app: show the forms on the store, save each case, email it to the people the merchant chose (and a confirmation to the customer, if the merchant turns it on), show the cases in the app and manage the subscription. We do not sell it, share it for advertising, or use it for any other purpose.

Who we share it with

• Shopify, which hosts the store and passes the form's requests to the app.
• Our hosting provider, which operates the server where the app and its database are kept, and the attached files when the merchant chooses our server.
• Our email provider, which delivers the case emails. Files are not attached to the emails: they include links that expire after 30 days.

Billing is handled entirely by Shopify. We never receive payment details.

How it is protected

The cases can be seen only from the app inside the store's Shopify admin. The links the app gives to files are signed and expire. Everything travels over HTTPS.

How long we keep it

• Photos and videos in the store's Files: until the merchant deletes them, or for the time the merchant sets in the app (between 30 and 730 days), after which the app deletes them.
• Photos and videos on our server: 180 days by default, or the time the merchant chooses on the Pro plan (between 30 and 730 days). Then they are deleted and the case says so.
• Files uploaded to a form that was never sent: 24 hours.
• Cases: until the merchant deletes them, or until the store's data is erased after uninstalling the app.
• When the app is uninstalled, Shopify notifies us 48 hours later and we delete everything we keep for the store: forms, cases, files on our server and settings. Files already in the store's Files stay there, under the merchant's control.

Your rights

Customers can ask the store to access, correct or delete their information; the merchant finds their cases in the app by email address and can delete them. When a customer asks Shopify to erase their data, Shopify tells us and we delete that customer's cases and files automatically. Merchants can write to us at hola@datios.com to exercise their own rights or with any question about this policy.

Changes to this policy

If we change what information the app handles, we will update this page and its date.