Privacy Policy

Last updated: October 25, 2026

This policy describes how Sky Checkout Rules (the “App”), operated by Sky Corporations, handles information when a merchant installs or uses the App. The App is intended for Shopify merchants generally and may be used by merchants in different countries.

Information the App processes

• Shop and app identifiers, store currency, development-store status, and active app subscription status returned by Shopify’s Admin and Partner APIs. These checks control access through Shopify App Pricing; the App does not collect credit card or bank account details, create its own charges, or store a local subscription history.
• Shopify shop and authorization information, including the shop domain, granted permissions, access and refresh tokens, and token expiration information, to authenticate the App and make authorized Shopify API requests.
• Shopify staff account information that Shopify includes in authorization sessions, which can include a staff member’s name, email address, user ID, language, and account or collaborator status.
• Merchant rule configurations and rule modification activity, stored in the app database. Active rules are also published to Shopify Function configuration metafields for delivery, payment, validation, and shipping discounts. Customer privacy request references and receipt dates are retained so merchants can download app-specific reports. Shopper, order, payment, and shipping-address records are not persisted by this app.
• Operational information in hosting and application error logs. Web request logs maintained by hosting providers may include request paths and query parameters. Shopify embedded requests can include temporary authentication parameters. The optional standalone Node server excludes URLs, query parameters, headers, and bodies from its HTTP logs. Application webhook logs include the shop domain and webhook topic.

How information is used

The App uses authorization information to provide its functionality, save and retrieve the merchant’s shipping rules, maintain the installation, verify subscription entitlement, and respond to Shopify privacy and lifecycle requests. Checkout conditions process the cart, delivery address, customer tag matches, and B2B buyer identity within Shopify Functions, without saving those shopper inputs to our database. The App does not sell personal information or use it for advertising.

Where information is processed

App session data is stored in a Neon-hosted PostgreSQL database. The production App is hosted by Vercel. Render may process information for legacy deployments, and Sentry processes diagnostic error reports when monitoring is configured. Shopify processes the rule configuration and provides the APIs, app platform, and webhook delivery. These providers may process information outside your country, including in the United States, according to the deployment region and their service terms.

Retention and deletion

While the App remains installed, authorization session data is retained as needed to operate the App. When the App is uninstalled, its app/uninstalled webhook deletes that shop’s stored sessions, rules, activity logs, and privacy request references. The shop/redact compliance webhook also deletes these records when Shopify sends a shop deletion request. The App does not retain customer records in its own database.

Deleted data may remain temporarily in provider backups, restore history, and operational logs until their configured retention periods expire. Contact our support desk for the current retention settings. Shopify retains Function configurations and subscription records according to its own systems and settings.

Sharing

Information is shared with Shopify as needed to provide the App and with Vercel, Neon, and, where configured, Render and Sentry to host, operate, and monitor it. These providers process information to provide their services under their own terms and privacy practices. The App does not sell personal information.

Privacy requests and contact

For questions or privacy requests, contact skycorporations02@gmail.com. Shopify merchants can also contact Shopify about information Shopify processes. The App responds to Shopify’s required customer data and redaction webhooks.

Depending on applicable law, individuals may have rights to request access to, correction of, or deletion of personal information, or to object to or restrict certain processing. Merchants can also uninstall the App to end its access to their store.

Location and applicable law

The App operator is based in India. The App and its providers may process information in the United States as described above. Privacy rights and obligations may depend on the laws that apply to the merchant or individual. For privacy requests, contact the App operator at the email address above.

Changes to this policy

This policy may be updated as the App or its data practices change. The latest version will be published at this URL with its updated date.