What this covers
This policy explains how Tellship ("we", "us") protects the data that the metangelo app processes for your Shopify store. What the app reads, what it keeps and how to have it deleted are in the privacy policy; the two pages are the terms on which we process your store's data.
You, the merchant, decide what the app does with your store's data. We process it on your behalf, only to run the app for you.
Only the data the app needs
- The app asks for each Shopify permission only when a screen first needs it.
- It reads orders from the last 60 days only, and never asks for older ones.
- It reads no customer field: no name, email, phone number or address. What it reads of an order is its number, date, payment and fulfilment status, and the fields you choose to edit.
- It sends only the values you changed back to your store.
Used only for what you asked
Your store's data is used to show you your records, write the edits you apply, read them back, revert them when you ask, count values against your plan, answer your support requests, and keep the app secure. It is not sold, not shared for marketing, and not used to train models or profile anyone. The app makes no automated decision about your customers.
Encryption
In transit. Every request between Shopify, your browser and the app is sent over HTTPS (TLS).
At rest. The app's database, hosted by Railway in the United States, is encrypted at rest. Backups of the database are encrypted and kept in Cloudflare R2.
Who can see it
Only the Tellship engineer who runs the app has access to the production database, its backups and the hosting account. They look at a store's records only to answer that store's support request or to fix a fault. Test stores and development copies of the app use their own databases, which hold no merchant's production data.
How long data is kept
- Staged edits are kept until you apply or discard them.
- The record of each commit and revert is kept while the app is installed, so that you can review it and revert it.
- Exported files: only the last file of each kind (variants, products, orders) is kept; a new export replaces it.
- Your store's access token is deleted as soon as you uninstall the app.
- Everything else the app holds for your store is deleted when Shopify sends the store redaction request, 48 hours after you uninstall.
- An order's data is deleted when Shopify sends a customer redaction request for that order.
- Backups taken before a deletion still hold the deleted records until they are replaced on the backup schedule.
You can ask us to delete what the app holds for your store at any time, by writing to metangelo-support@tellship.com.
Security incidents
If we learn of a security incident that affects your store's data, we will contain it, find out what was affected, and tell you and Shopify within 72 hours of learning of it: what happened, what data was involved, and what we have done about it.
Providers
- Railway hosts the app and its database, in the United States.
- Cloudflare R2 holds the database's encrypted backups.
The app sends your store's data to no one else. Shopify handles your billing; the app never sees a payment.
Changes to this policy
If this policy changes, we will update this page and the date at the top.
Contact
Tellship · Bengaluru, India
metangelo-support@tellship.com