Privacy Policy for Sartodia Shipping Protection

Sartodia Shipping Protection ("we", "us", "our", or the "App") provides shipping protection and claims management services (the "Service") to merchants who use Shopify to power their stores.

This Privacy Policy describes how we collect, use, and protect personal information when merchants install or use the App in connection with their Shopify-supported stores.

By installing or using the App, you agree to the practices described in this Privacy Policy.

Information We Collect

When you install and use the App, we access certain information from your Shopify store through the Shopify Admin API, as necessary to provide the Service.

This may include:

Merchant Information

• Store owner name
• Email address
• Phone number
• Business address

Customer Information

• Name
• Email address
• Phone number
• Shipping and billing address
• Order details
• Fulfillment and shipping status

Store and Order Data

• Product and variant information
• Inventory data
• Order history (limited to what is necessary for protection and claims processing)
• Store settings required to install and operate the protection widget

We only access data necessary to provide shipping protection functionality and claims management.

How We Use Personal Information

We use the information we collect solely to:

• Enable shipping protection at checkout
• Attach protection coverage to eligible orders
• Process and manage loss, damage, or theft claims
• Communicate with merchants regarding claims and support
• Provide reporting and analytics within the App dashboard
• Comply with legal and regulatory obligations
• Improve and maintain the Service

We do not use merchant or customer data for advertising, marketing, or profiling.

No Sale or Third-Party Sharing

Sartodia Shipping Protection does not sell, rent, trade, or share personal information with third parties for marketing or commercial purposes.

All data accessed through Shopify is used exclusively to provide shipping protection services within the Shopify ecosystem.

We may disclose information only if required to:

• Comply with applicable laws or legal processes
• Enforce our agreements
• Protect our rights or prevent fraud

Cookies and Tracking Technologies

We may use standard technologies such as cookies or similar tools solely to ensure the proper functioning of the App and to improve user experience.

We do not use tracking technologies for cross-site advertising or behavioral marketing.

You can control cookies through your browser settings.

Data Retention

We retain personal information only for as long as necessary to:

• Provide the Service
• Process claims and resolve disputes
• Comply with legal, tax, or regulatory requirements

If a merchant uninstalls the App, we will delete or anonymize personal data within a reasonable period unless retention is required by law.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data.

For European Economic Area (EEA) Residents

You have the right to:

• Access personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Request restriction of processing
• Object to processing
• Request data portability
• Lodge a complaint with your local data protection authority

We process personal data under the legal bases of contractual necessity, legitimate interests, and legal compliance.

For California Residents (CCPA)

If you are a California resident, you may have the right to:

• Request access to the personal information we collect
• Request deletion of personal information
• Request information about how your data is used

We do not sell personal information.

To exercise any rights, please contact us using the details below.

Data Security

We implement reasonable administrative, technical, and organizational safeguards to protect personal information against unauthorized access, alteration, disclosure, or destruction.

While we take appropriate security measures, no method of transmission over the internet is completely secure.

International Data Transfers

Personal information may be processed in countries outside your jurisdiction. Where required, we apply appropriate safeguards to protect personal data in accordance with applicable laws.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes.

We will post the updated version on this page and revise the "Effective Date."