Maker’s Production View (“the App”) is operated by Fleartex (“we”, “us”). This policy explains what data the App accesses, why, how we protect it, and your and your customers’ rights. It applies to merchants who install the App and to the customers of those merchants whose order data the App processes on the merchant’s behalf.
1. Our role
For the order data processed through the App, the merchant is the data controller and we act as a data processor on the merchant’s behalf. We process this data only to provide the App’s functionality to that merchant.
2. What data the App accesses
When a merchant installs the App, they grant it the read_orders
scope. The App reads, from the Shopify Admin API:
- Order identifiers — order name/number, creation date, fulfillment status.
- Line items — product title, variant title, SKU, quantity, and line-item custom attributes (the customer’s customization, e.g. engraving text, monogram, colour, an uploaded-file URL).
- Order-level note attributes — only if the merchant enables that option in the App’s settings.
The App does NOT access customer personal data — it does not request or read customer name, address, email, phone number, or payment details. Under Shopify’s Protected Customer Data framework this is Level 1 access.
3. What we store
We store the minimum needed to provide the workflow, keyed to the merchant’s shop and Shopify line-item IDs:
- Produced status — a per-line-item “produced” quantity and timestamp.
- App settings — the merchant’s customization-source toggles.
- Session data — the standard Shopify session/OAuth token required to run an embedded app.
We do not store customer personal data, order contents beyond the produced-status reference, or any payment information. Order details are fetched live from Shopify each time the production queue is viewed and are not retained.
4. How we use the data
Solely to provide the App’s features to the installing merchant: displaying the production queue, batching, tracking produced status, generating printable batch sheets, and the settings above. We do not sell, rent, or share this data, and we do not use it for advertising, profiling, or automated decision-making that produces legal or similarly significant effects.
5. Sub-processors
We use the following service providers strictly to host and run the App:
- Fly.io — application hosting and the database (SQLite on a persistent Fly volume) that stores the produced-status and settings described above. Hosted in the EU (Frankfurt region).
- Shopify — the source of the order data and the platform the App runs on.
6. Data retention & deletion
- Produced-status and settings are retained while the App is installed.
- On uninstall, Shopify sends a
shop/redactrequest (about 48 hours later); on receiving it we delete all of that shop’s stored data. - Because the App holds no customer personal data,
customers/data_requestandcustomers/redactrequests are acknowledged and require no data return or deletion on our side. - A merchant may request deletion of their stored data at any time via the contact below.
7. Security
- All traffic between the merchant’s browser, Shopify, and our servers is encrypted in transit using TLS.
- Stored data is encrypted at rest.
- Access to production data is limited to authorized personnel.
- We follow the data-minimization principle: we request the minimum scope (
read_orders) and store the minimum data.
8. Your rights
Depending on your jurisdiction (including GDPR/EEA), data subjects may have rights to access, correct, delete, or restrict processing of their personal data. Because the App processes order data on the merchant’s behalf, such requests should be directed to the merchant (the controller); we will assist the merchant in fulfilling them.
9. Changes
We may update this policy; the “Last updated” date will change and material changes will be communicated to installed merchants.
10. Contact
Questions or data requests: fleartex@gmail.com
Fleartex