Privacy Policy

Introduction

RuleTags ("we", "our", or "the app") is a Shopify application operated by MountainStacklabs that helps merchants automate tagging on products, orders, and customers. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

Information we collect

When you install and use RuleTags, we may collect and store:

• Shop information — your store domain and Shopify session data required to authenticate the app.
• Rule configuration — rule names, conditions, tag actions, schedules, and targeting settings you create in the app.
• Activity logs — records of tag changes applied by rules, including entity type, record title, tags added or removed, and timestamps.
• App settings — cron schedule preferences and log retention settings configured in Settings.

We access Shopify product, order, and customer data only as needed to evaluate your rules and apply tag changes. We do not sell personal data to third parties.

How we use information

We use collected information to:

• Provide, operate, and maintain the RuleTags service
• Execute automation rules on your behalf via Shopify APIs
• Display activity history, analytics, and run summaries in the app
• Run scheduled automation when you enable cron in Settings
• Improve app reliability, security, and performance

Data retention

Activity log entries are retained according to your configured retention period (default: 30 days) and are automatically purged after that period. When you uninstall the app, shop session data is removed promptly. Remaining shop data is deleted in response to Shopify's mandatory shop/redact webhook, typically within 48 hours of uninstallation.

GDPR and privacy law compliance

RuleTags subscribes to Shopify's mandatory compliance webhooks and responds as required by applicable privacy laws:

• customers/data_request — we identify stored activity related to the requested customer or orders and make it available to the store owner upon request.
• customers/redact — we delete activity log entries associated with the specified customer and orders.
• shop/redact — we delete all shop-specific data from our systems after app uninstallation.

Data sharing

We do not share your data with third parties except as necessary to operate the app (e.g. hosting infrastructure and Shopify's APIs). We do not use your store data for advertising purposes.

Security

We use industry-standard practices to protect data in transit and at rest, including HTTPS for all communications and secure session storage. Access to shop data is scoped to authenticated sessions and shop-isolated database queries.

Your rights

Depending on your location, you may have rights to access, correct, or delete personal data. Store owners can submit data requests through Shopify. Customers of Shopify stores may contact the store owner directly regarding their personal data.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date above.

Contact

For privacy-related questions about RuleTags, contact MountainStacklabs: