Privacy Policy

Introduction

SlotMaster ("we", "our", or "us") is committed to protecting the privacy of merchants and their customers. This Privacy Policy explains how we collect, use, and safeguard data when you use our capacity management application for Shopify.

Data We Collect

Merchant Data

When you install and use SlotMaster, we collect:

• Shop Information: Shop domain, access tokens (for authentication)
• Product Data: Product variant IDs and merchant-configured points
• Time Slot Configuration: Delivery time slots and capacity limits you define
• Capacity Usage: Aggregated slot usage data (date, slot ID, total points used)

Order Data

We process the following order information through webhooks:

• Order ID: For idempotency and logging purposes
• Line Items: Product variant IDs and quantities (to calculate workload points)
• Order Attributes: Delivery date and time slot ID (from cart attributes)
• Financial Status: To determine if order should be processed (paid/authorized only)

Data We Do NOT Collect

We explicitly do not collect, store, or process:

• ❌ Customer names
• ❌ Customer email addresses
• ❌ Customer phone numbers
• ❌ Customer shipping or billing addresses
• ❌ Payment information or credit card details
• ❌ Any personally identifiable information (PII) about customers

How We Use Data

We use the collected data solely to:

• Track Capacity: Update slot capacity counters when orders are placed
• Calculate Workload: Compute total workload points from product variants
• Prevent Overbooking: Ensure merchants don't exceed their production capacity
• Provide Service: Enable core app functionality for capacity management

We do not use your data for marketing, advertising, analytics, or any purpose other than providing the SlotMaster service.

Data Storage and Retention

What We Store

• Shop Configuration: Retained while app is installed
• Slot Usage Data: Aggregated capacity usage (shop_id, slot_id, date, points)
• Product Points: Points assigned to product variants

What We Don't Store

Order data is processed in real-time during webhook execution and is not persistedbeyond the processing duration. We only store the aggregated capacity numbers, not individual order details.

Data Deletion

When you uninstall SlotMaster, all your shop data is automatically deleted from our systems, including:

• Shop credentials and access tokens
• Product points and configurations
• Time slot definitions
• Capacity usage history

Data Security

We implement industry-standard security measures to protect your data:

• Encryption in Transit: All data transmitted using HTTPS/TLS encryption
• Encryption at Rest: Database hosted on Supabase with encryption at rest
• Authentication: HMAC signature verification for all webhooks
• Access Control: Restricted access to authorized personnel only
• Secure Hosting: Deployed on Railway with SOC 2 compliance
• Environment Variables: Sensitive credentials stored securely, never in code

Data Sharing

We do not sell, rent, or share your data with third parties, except:

• Service Providers: Supabase (database hosting) and Railway (app hosting) - both with strict data protection agreements
• Legal Requirements: If required by law or to protect our legal rights

Your Rights

As a merchant using SlotMaster, you have the right to:

• Access: Request a copy of your data stored in our systems
• Correction: Update or correct inaccurate data
• Deletion: Request deletion of your data (automatic upon app uninstall)
• Export: Export your configuration and capacity data via API
• Portability: Receive your data in a machine-readable format

To exercise these rights, please contact us at the email address below.

Compliance

SlotMaster complies with:

• GDPR: General Data Protection Regulation (EU)
• CCPA: California Consumer Privacy Act
• Shopify's API Terms: All Shopify Partner Program requirements
• Data Minimization: We only collect data necessary for app functionality

Cookies and Tracking

SlotMaster does not use cookies or tracking technologies. We do not track user behavior or collect analytics data about how you use the app.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email if changes are material
• Post the updated policy on this page

Continued use of SlotMaster after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

• Email: support@forthdeck.com
• App Support: Via Shopify App Dashboard

Shopify Merchants

This app is built for Shopify merchants. For information about how Shopify handles data, please review Shopify's Privacy Policy.