Privacy Policy
Sellops OrderEditing (the "App") ยท Last updated: 21 October 2026
This policy explains which data the App accesses, stores and shares when a merchant ("you") installs it on a Shopify store, and how the store's customers are affected.
1. Who we are
Seller Operations GmbH, [Street and number, postcode city, Germany]. Contact for privacy questions: [privacy@your-domain.com].
For personal data of your customers, you (the merchant) are the controller and we act as your processor: we process it only to provide the App's functions on your instructions. For data about you as our customer (for example your store and staff contact details), we are the controller.
2. What the App does
The App lets your customers change their order after checkout within a time window you set (address, shipping method, items, quantities, discount codes, notes, cancellation), shows optional offers that are added to the same order, holds the order from fulfillment until the window closes, and collects or refunds price differences through Shopify.
3. Data the App accesses through Shopify
With the permissions you grant on installation, the App reads from Shopify:
- Store information (domain, name, currency, time zone, shipping and discount settings, theme settings to check whether the App's theme embed is switched on).
- Products, variants, inventory and collections (to offer replacements and upsell products).
- Orders, including the customer's name, email address, phone number, shipping and billing address, items, prices, payment and fulfillment status.
- The Shopify customer ID of the customer who placed the order.
Customer names, email addresses and phone numbers are read from Shopify when they are needed and are not copied into the App's database, except where an address appears in the change history or in the snapshot of an unpaid change (section 4). The App never receives or stores card or bank details: payments and refunds are handled entirely by Shopify.
4. Data the App stores
| Data | Content | Purpose |
|---|---|---|
| Store | Store domain, name, currency, time zone; app settings, layout and upsell rules | Running the app for the store |
| Access | Shopify access token for the store (and, for staff using the app, the staff member's name and email as provided by Shopify) | Calling Shopify on the merchant's behalf |
| Editing windows | Order ID and order number, end of the editing window, fulfillment holds placed by the app | Opening and closing the editing window |
| Change history | Each change a customer or staff member made to an order: type, date, amounts, notes, and for address changes the old and new address | Audit trail for the merchant, payments and refunds |
| Open payments | Amount due for a change and a snapshot of the order before the change (items, shipping, address) | Undoing an unpaid change |
| Upsell and discount codes | Offers shown and added per order, Shopify customer ID, discount codes used | Analytics for the merchant, once-per-customer code limits |
| Add-to-order sessions | Order ID and the cart contents while a customer adds items | Adding the items to the right order |
Server logs record technical events (for example "address changed on order #1001"). In production, email addresses, phone numbers, IP addresses and address fields are masked in the logs, and customer IDs are shortened. Logs are kept for at most 30 days.
5. Why we process the data (legal basis)
- To provide the App's functions to you under our agreement (Art. 6(1)(b) GDPR) and, for your customers' data, on your behalf as processor (Art. 28 GDPR).
- To keep the App secure and prevent misuse, for example limiting repeated attempts (Art. 6(1)(f) GDPR).
We do not use the data for advertising, profiling or any purpose other than running the App, and we do not sell it.
6. Who receives the data
- Shopify: all changes are made in your store through Shopify's APIs.
- Our hosting provider ([hosting provider, server location]), which runs the App's server and database under a data processing agreement.
No other third parties receive the data. If data is processed outside the EU/EEA, this happens only with appropriate safeguards (such as the EU Standard Contractual Clauses).
7. How long the data is kept
- While the App is installed, the data is kept so that you can see the change history and settings.
- When you uninstall the App, Shopify notifies us after 48 hours and we delete all data of your store from our database.
- When Shopify forwards a customer's deletion request ("customers/redact"), we delete the stored data for that customer's orders.
- When Shopify forwards a customer's data request ("customers/data_request"), we provide you with the data stored for the orders concerned.
8. Security
- All connections use HTTPS; requests from Shopify are verified with Shopify's signatures.
- Customers can only change their own orders: signed-in customers by their Shopify account, guests only on the Thank you page or after signing in with the email address of the order (configurable by the merchant).
- Repeated failed attempts are limited, every change is checked again on the server, and access to the server and database is restricted to authorised staff.
9. Your rights
You have the right to access, correct, delete or restrict the processing of your personal data, to data portability and to object, and to complain to a data protection authority. Customers of a store should contact the store first, as the store is responsible for their data; we support the store in answering such requests. Contact us at [privacy@your-domain.com].
10. Changes
We will update this policy when the App's data processing changes and show the new date at the top.