Who controls the data
Shop Heck LLC operates Coordinate Studio. When a Shopify merchant uses the app, the merchant controls the customer data used for its store and Coordinate Studio processes that data to provide the service. For direct Coordinate Studio accounts, Shop Heck LLC controls the account and service data described here.
Data we process
- Merchant account details, staff identity, store domain, app configuration, and authorization scopes.
- Selected product, variant, source image, template, and engraving-area configuration.
- Coordinates, place labels, personalization text, approvals, and production-ready design snapshots.
- For Shopify orders: opaque order and line identifiers, product and variant identifiers, price totals, currency, payment state, and a design reference.
- Operational records such as webhook IDs, audit events, errors, and security evidence.
Coordinate Studio does not copy a Shopify buyer's name, email, phone number, billing address, or shipping address into its order projection. Mandatory privacy webhook bodies are processed in memory and are not retained.
Why we process it
We use this information to connect a merchant's storefront, import products the merchant selects, create and approve personalized designs, prepare production files, create production jobs, provide support, secure the service, and meet legal or privacy obligations. We do not use private coordinates or Shopify customer data for advertising, data brokerage, or model training.
Service providers
We use providers only where needed to operate the service, including Shopify for storefront and order events, Supabase for hosted PostgreSQL/authentication/storage, Vercel for application hosting, Stripe for direct payment processing, and Mapbox for place search and mapping. Each provider processes data under its own terms and our applicable agreement with it.
Retention
Our launch retention schedule is based on purpose and sensitivity:
- Raw Shopify compliance webhook bodies: not retained.
- Shopify OAuth credentials: removed when a shop disconnects or a verified shop-redaction request is received.
- Unpurchased guest designs and precise locations: scheduled for removal after 90 days of inactivity.
- Completed production design/location records: scheduled for removal or de-identification 180 days after completion, unless an active dispute or legal duty requires limited retention.
- Minimal financial and transaction records: up to seven years where needed for tax, accounting, fraud prevention, or legal obligations; unnecessary design/location data is not included in that long-term record.
- Privacy-request evidence containing hashed references rather than raw request data: 24 months.
- Backups: expire through the configured rolling backup lifecycle; deletion takes effect in live systems first and in backups as they rotate out.
Security and access
We use encrypted transport, encrypted provider credentials, server-derived tenant access, role checks, validation, audit records, and restricted database tables. Storefront requests do not control price, tenant, order status, or production output.
Your choices and rights
Depending on your location, you may ask to access, correct, delete, or restrict personal data. Shopify customers should normally begin with the merchant that received their order; Shopify then sends installed apps the required privacy event. Anyone may also use our data request instructions.
Contact
Email privacy and security questions to shopheckllc@gmail.com. We may verify your identity and authority before disclosing or deleting data.