Privacy Policy

Last updated: July 31, 2026

This policy explains what data Craftline ("the app") accesses, what data you enter directly, how it's stored, and how to exercise your rights under the GDPR (EU/UK), the CPRA (California), and similar data protection laws.

Who controls this data

The app is operated by Danyil Service LLC (Danyil Kuzminskyi). For any privacy question or request, contact danyilkuzminskyi@gmail.com.

Data we read from your Shopify store

Using the permissions you approve at install, the app reads:

• Orders: order ID, order number, and the product tags on their line items, used to route the order into the right stage template.
• Products: tags, used for stage-template matching.
• Fulfillments: used to automatically advance an order to its "Shipped" stage.

The app does not store customer names, emails, addresses, or phone numbers. When a stage change triggers a customer notification email, the customer's name and email are fetched live from Shopify's Admin API at the moment the email is sent, used only to address and deliver that one email, and never written to our database.

Data we store

What Craftline actually persists, tied to your shop:

• Stage templates and stages you configure (names, product tags, icons, auto-advance timing, email templates).
• Order progress: order ID, order number, current stage, and a log of stage transitions with timestamps — no customer data.
• Settings: widget branding, email sender name, and API keys you generate.

Your staff login session

When a staff member installs or opens the app, Shopify shares basic account info for that session (name, email, locale) so the app knows who's logged in. This is standard Shopify OAuth session data, not customer data, and is only used to keep you signed in.

The customer-facing status widget

The Thank You and Order Status page widget calls our backend using Shopify's session token mechanism, scoped to the specific order being viewed. It only ever returns stage names, dates, and your widget branding — never any of the buyer's personal information.

Billing

During the 14-day trial, no payment is collected. When your subscription begins, payment will be processed entirely through Shopify Billing — the app itself never sees or stores your card details.

Where data is stored, and for how long

All stored data lives in a private, self-hosted PostgreSQL database on servers located in the United States. Everything tied to your shop is deleted automatically when you uninstall the app, and again in response to Shopify's mandatory shop/redact webhook.

No third-party sharing

The app doesn't use analytics, advertising, or tracking services. Email notifications are sent through Resend, acting solely as our email delivery provider — Craftline never sells or shares your data with third parties for any other purpose.

Your rights

You can request access to or deletion of your data at any time by contacting danyilkuzminskyi@gmail.com, or by uninstalling the app, which triggers deletion automatically. The app also responds to Shopify's mandatory compliance webhooks (customers/data_request, customers/redact, shop/redact) on your behalf.

Changes to this policy

If this policy changes, the "Last updated" date above will change too. Material changes will be reflected here before they take effect.