Privacy Policy

• Store information: your store’s myshopify domain, store name, store contact email address, time zone and weight unit.
• Products: product titles, product types, variant titles, SKUs and option values, so you can link products to beans.
• Orders: for open orders, the order ID, order number, creation date, tags, fulfillment and cancellation status, whether it is a test order, and for each line item the product name, product variant and quantities (ordered, current and unfulfilled). This data is read when you create a roast sheet (or when the daily email is prepared) and is processed in memory. We do not request any customer fields (name, email, phone, addresses).
• Access credentials: an access token issued by Shopify, stored encrypted (AES-256-GCM).
• Billing status: your plan and the status of charges you approve. Payments are processed by Shopify.

The App does not change anything in your store.

• Your settings: units, roaster capacity, roast loss, daily email time.
• Beans, blends and the links between your product variants and beans (weights, grinds, bag counts).
• Roast sheet results: totals per bean and per bag size (weights, batches, bag counts) and the filters and roasted stock you entered. They may include product names (for example, products you have not set up yet), but do not contain order IDs or any customer information. Kept for 90 days.
• Free-plan order count: on the Free plan, the IDs of orders included in sheets during the month, so that each order is counted once. Only the order ID is stored. Kept for about 90 days.

• To calculate roast plans and packing lists and show, print or export them.
• To send the optional daily roast plan email to your store contact email (paid plans, only if you turn it on).
• To manage billing, enforce plan limits, prevent repeated free trials and keep the App secure.
• To diagnose errors.

We use order data only to provide these calculations. We do not use it for marketing, analytics across stores, advertising or AI training, and we do not sell or share it.

• Cloudflare, Inc. – hosting, database. Cloudflare keeps short-term request logs (such as IP addresses, URLs and timestamps) for security and troubleshooting.
• Resend, Inc. – delivery of the daily email.
• Functional Software, Inc. (Sentry) – error monitoring. Error reports may include your store domain.
• Shopify Inc. – app platform and billing.

We may disclose information if required by law, or in connection with a merger or acquisition, in which case this Policy continues to apply.

We are based in Japan. Our providers may process data in the United States and other countries, with appropriate safeguards where required.

• Roast sheet results and Free-plan order counts are deleted after about 90 days.
• When you uninstall the App, the access token is deleted immediately. Shopify then sends a data deletion request (48 hours after uninstalling), and we delete all of your store’s data.
• Exception: to prevent repeated free trials, we keep a keyed one-way hash of your store domain and the trial start date.
• We keep a record that we received each data request from Shopify, identified only by a keyed one-way hash of your store domain, to demonstrate that we responded.
• Request logs kept by our hosting provider are deleted automatically within a few days.

All traffic uses TLS. Data is encrypted at rest by our hosting provider, and access tokens are additionally encrypted with AES-256-GCM. Webhooks are verified with Shopify’s signatures. Access to production systems is limited to the operator.

Depending on where you live (for example under the GDPR, UK GDPR, CCPA or Japan’s Act on the Protection of Personal Information), you may have rights to access, correct, delete or export your personal information. Contact privacy@altrasoftware.app. Uninstalling the App deletes your data as described above. Where we process personal data on a merchant’s behalf, our Data Processing Addendum applies.

Customer data requests and deletion requests sent through Shopify are received by the App. Because the App does not store customer personal data, there is nothing to export or delete.

We will post updates on this page with a new effective date and notify merchants of material changes by email or in the App.

Altra Software
Address: Available upon request
Country: Japan
Email: privacy@altrasoftware.app