Privacy policy

Effective 24 October 2026

Waseem.Space provides Saudi Checkout Guard for Shopify merchants. This policy explains the limited information the app handles and how to contact us about it.

Information the app handles

The hosted app stores the Shopify shop identifier, the installation session and access token supplied by Shopify, and the merchant's rule settings. Those settings can include a delivery-rate title, accepted Saudi city spellings, and English and Arabic checkout messages.

The checkout Functions run within Shopify. Our hosted service does not receive or store customer names, contact details, delivery addresses, Short Address values, orders, payment details, or checkout contents.

We also store the shop’s selected plan, free-access eligibility, subscription and trial dates, and the last successful billing check. Shopify handles subscription approval and payment. We do not receive payment-card details. If the app is reinstalled, we may use Shopify’s installation history to restore free access granted before paid pricing began.

How information is used

We store the store's business contact email, store name, installation and removal dates, email preferences and delivery records. We use these to send a welcome, one setup check-in after three days, and one feedback email after removal. A review invitation is sent only after you explicitly opt in. Replies reach Waseem, and each automated email links to preferences where you can stop further emails.

We use installation and configuration information only to authenticate the merchant, display and save the merchant's settings, operate the app, confirm access to paid or free features, prevent abuse, diagnose failures, and provide support.

Sharing and service providers

Shopify provides the commerce platform and runs the checkout Functions. Railway provides hosting and managed database services. Resend delivers the automated merchant emails and receives the recipient address and message. We do not sell personal information or use merchant information for advertising.

Retention and deletion

Installation sessions and our billing records are deleted when Shopify confirms that the app was uninstalled. A later Shopify shop-redaction request triggers the same deletion again and deletes merchant contact details, email preferences and automated email records. Contact and delivery records may be retained briefly after removal to send the single feedback email and prevent duplicate sends; any remaining records are removed within 30 days of removal. Privacy erasure also removes saved email preferences. If you later reinstall after those records have been erased, a new welcome and setup-support sequence can begin; review invitations still require a new opt-in. Any remaining shop-specific app records are deleted within 30 days of a valid deletion request unless applicable law requires a longer period. The app does not maintain customer or order records to export or redact.

Security

Connections use HTTPS. Secrets are kept in protected hosting settings, access is limited to operating the service, and Shopify webhook signatures are verified before requests are accepted. No internet service can guarantee absolute security.

Your choices and rights

Merchants can remove the app from Shopify at any time. For access, correction, deletion, or privacy questions, contact us. Customer privacy requests should normally begin with the Shopify merchant that collected the customer's information.

Contact

Email checkoutguard@waseem.space.