Shopify App

Privacy Policy

Custom Print Price Engine  ·  Effective date: 1 May 2026

This Privacy Policy explains how Custom Print Price Engine (“the App”, “we”, “us”) collects, uses, and protects information when you install and use the App via the Shopify App Store. By installing the App you agree to the practices described below.

1. Who We Are

Custom Print Price Engine is a Shopify app that helps merchants configure dynamic pricing for custom print products (banners, stickers, signage, etc.) and display an interactive price calculator on their storefront. Questions about this policy can be directed to info@lubbelabs.com.

2. Data We Collect About Merchants

When you install the App, Shopify shares the following with us and we store it in our database to provide the service:

• Shop domain – used to associate all configuration with your store.
• Shopify access token and session credentials – required to authenticate API calls on your behalf. Tokens are stored encrypted at rest.
• Account owner identity (name, email, locale) – received from Shopify during OAuth and stored in the session record. Used only for account-level administration; never used for marketing.
• App configuration – measurement units, calculator UI labels, brand colours, product recipes, ingredients, discount tiers, and product options you create inside the App.
• Billing and usage data – your active subscription plan, included order allowance, billing cap, and a running count of custom orders processed. Used solely to calculate overage charges via Shopify’s billing API.

3. Order Data (orders/paid Webhook)

The App subscribes to Shopify’s orders/paid webhook to count orders that contain custom print properties (e.g. _print_width, _CalcQty). We inspect only the line-item properties of each order to determine whether it is a custom order. We do not read, store, or process any customer personal information (name, email, address, payment details) from these webhooks. The order ID is logged transiently for debugging purposes only and is not persisted to the database.

4. Shopper Data (Storefront Calculator)

When a shopper uses the price calculator widget, the following data is sent to our API to compute a price:

• Product ID and variant ID
• Width, height, and quantity entered by the shopper
• Selections for any custom options (e.g. “Corner style: Rounded”)

None of this data is stored. It is used in-memory to perform the price calculation and the result is returned immediately. We do not collect shopper names, email addresses, IP addresses, or any other personally identifying information during this process.

5. Artwork File Uploads

If you enable the upload feature, shoppers may submit artwork files (images, PDFs, vector files) through your storefront. These files are:

• Transmitted securely over HTTPS and stored in cloud object storage (Amazon S3 or Cloudflare R2).
• Stored using a filename that includes your shop handle, the date, and product/variant context — no shopper PII is embedded in the filename or metadata.
• Accessible via time-limited signed URLs (1-hour expiry).
• Retained until you (the merchant) delete them, or upon a verified data-deletion request (see Section 9).

Artwork files are used solely to fulfil the print order and are not analysed, shared, or used for any other purpose.

6. Third-Party Services

• Shopify – The App runs within Shopify’s platform. Shopify’s own Privacy Policy governs data held within Shopify itself.
• Cloud object storage (Amazon S3 / Cloudflare R2) – Used to store artwork files uploaded by shoppers.
• Transactional email (optional) – If configured, SendGrid or Postmark may send billing alert emails to the merchant. Only the merchant’s shop name and billing threshold values are included; no shopper data is transmitted.

We do not sell, rent, or share any data with advertising networks or data brokers.

7. How We Use Data

We use the data we collect exclusively to:

• Deliver and improve the App’s core functionality (price calculation, recipe management).
• Authenticate and authorise access to your store via Shopify’s OAuth flow.
• Track usage for billing purposes (counting custom orders against your plan allowance).
• Send billing-related administrative alerts to the merchant.
• Debug errors and maintain service reliability via server logs.

8. Data Retention

• Shopify session tokens – Deleted automatically when you uninstall the App.
• App configuration (recipes, ingredients, settings) – Retained after uninstall so your data is preserved if you reinstall. Contact us to request deletion.
• Billing records – Retained for accounting and dispute-resolution purposes.
• Artwork files – Retained in cloud storage until explicitly deleted by the merchant or upon a verified data-deletion request.
• Server logs – Retained for up to 30 days for debugging, then purged automatically.

9. Your Rights and Data Deletion

You may request deletion of all data associated with your shop at any time by emailing info@lubbelabs.com with the subject line “Data Deletion Request – [your-shop].myshopify.com”. We will process your request within 30 days.

Shopify also provides a mandatory customer data-erasure webhook. If a shopper submits a data-erasure request through your store, Shopify forwards it to us. Because we do not store any shopper PII, these requests are acknowledged and closed immediately.

10. Security

All data in transit is protected by TLS/HTTPS. Database records are stored with encryption at rest. Shopify access tokens are stored encrypted. Artwork files in cloud storage are accessible only via time-limited signed URLs. We follow industry-standard practices to protect against unauthorised access.

11. Changes to This Policy

We may update this policy from time to time. The effective date at the top of this page will reflect the most recent revision. Continued use of the App after a change constitutes acceptance of the revised policy. Material changes will be communicated via the App’s admin interface or by email to the store owner.

12. Contact

For privacy-related questions or requests, please contact us at info@lubbelabs.com.