Privacy Policy

This Privacy Policy explains how DapperLogic, LLC ("DapperLogic", "we", "us") collects, uses, and protects information in connection with our Shopify application and related services (the "Service"), including the merchant dashboard at app.dapperlogic.xyz. By installing or using the Service, you agree to this Policy.

Information we process

To provide B2B tier-pricing synchronization, we process the following:

• Store & account data: your Shopify store domain, the offline access token issued during installation, and the API scopes you grant.
• Catalog & B2B data: company, company-location, customer tier tags, and B2B market/catalog metadata that we read from and write to your store via the Shopify Admin API solely to keep tier assignments correct.
• Contact data: a name, email address, and message if you contact us through our website.
• Administrative sign-in: for our internal admin console we use Google sign-in restricted to our own organization; we receive only the basic profile/email of authorized DapperLogic staff.
• Operational logs: records of sync runs (counts, statuses, timestamps) for auditing and support.

We do not collect, process, or store payment card data or other cardholder information. All payments and checkout occur within Shopify or other dedicated providers; the Service has no access to that data.

How we use information

• To operate the Service – reconciling B2B company locations into the correct tier catalog based on customer tier tags.
• To authenticate requests and maintain your session.
• To provide support, monitor reliability, and prevent abuse.
• To communicate with you about your account or the Service.

We do not sell your information or use it for advertising.

Storage & security

Shopify access tokens are encrypted at rest (AES-256-GCM) and transmitted over TLS. Application data is hosted with reputable infrastructure providers in the United States. We apply access controls and the principle of least privilege to systems that handle your data.

Service providers

We share data only with providers that help us run the Service, under appropriate safeguards:

• Shopify – the platform your store and data live on.
• Railway – application and database hosting.
• Vercel – frontend hosting.
• Resend – transactional and contact email delivery.
• Google – administrator single sign-on for our internal console.

Data retention & deletion

We retain store data only while your installation is active. When you uninstall the app, the stored access token is revoked and deleted, and the Service stops accessing your store. You may request deletion of remaining associated data by emailing us. We also honor Shopify's mandatory data request and redaction webhooks.

Cookies

We use strictly necessary cookies to keep you signed in to the dashboard and admin console. We do not use advertising or cross-site tracking cookies.

Your rights

Depending on your location, you may have rights to access, correct, or delete your personal data, or to object to certain processing. To exercise these, contact us at the address below.

Changes

We may update this Policy from time to time. Material changes will be reflected by the "Last updated" date above and, where appropriate, communicated to you.

Contact

DapperLogic, LLC – contact@dapperlogic.xyz