Information Processed

DarkShepherd processes only Shopify data reasonably necessary to provide its order-operations functionality. Current Beta functionality may process:

• Order identifiers and order status
• Payment status
• Fulfillment status and fulfillment events
• Tracking status and tracking information
• Refund and cancellation status
• Order timestamps and operational event history
• Shopify shop and application session information
• Investigation notes, investigation status, ownership, and operational records created in DarkShepherd

DarkShepherd currently does not require customer name, email address, phone number, or street address for Beta V1 functionality.

How Information Is Used

DarkShepherd uses this information to:

• Identify orders requiring merchant attention
• Detect order-status mismatches and stalled activity
• Provide investigation context and operational history
• Recommend next actions to merchant teams
• Maintain investigation workflow and history
• Operate, secure, troubleshoot, and improve DarkShepherd

Protected customer data is not used for advertising, customer profiling, or sale of personal information.

Purpose Limitation and Data Minimization

DarkShepherd limits processing to what is reasonably necessary for the order-operations functionality a merchant uses. Access to Shopify data is limited to the permissions required for that functionality. Beta V1 does not request customer name, email address, phone number, or street address.

Service Providers

DarkShepherd uses service providers to host the application, store operational records, and connect to Shopify. Those providers process information only as needed to provide the service. DarkShepherd does not sell personal information to service providers or other third parties.

Security

DarkShepherd uses encrypted connections for data in transit and managed infrastructure designed to provide encryption at rest and access controls.

Data Retention

DarkShepherd retains merchant and operational data only for as long as needed to provide the service, as described in the Data Retention Policy. Protected customer data is not retained indefinitely or for speculative future use.

Merchant Responsibilities

Merchants remain responsible for their Shopify store, their customers, and the notices they provide about how store data is used. Merchants should grant DarkShepherd only the Shopify access required for the functionality they use. Investigation notes and workflow records created in DarkShepherd are the merchant's operational records.

Data Requests and Deletion

Merchants may request access to, correction of, or deletion of data DarkShepherd holds for their shop by contacting us at the address below. After app uninstall or account termination, DarkShepherd deletes or de-identifies merchant and protected customer data under its control within 30 days, except where a longer period is described in the Data Retention Policy.

Marketing Website

Visitors to this marketing website may submit a name, email address, company, website, or scheduling details through contact and beta forms. That information is used to respond to inquiries and operate the website. Cookie and analytics practices are described in the Cookie Policy.

Changes to This Policy

We may update this policy from time to time. Updates will be posted on this page with a revised effective date.

Contact

DarkShepherd / CodeCraftBrew LLC

jin@darkshepherd.co