Privacy Policy
Last updated: 7 October 2026. Publisher: Plainwharf · Contact: support@plainwharf.com
Shipping Adjustment Auditor (“the app”) helps Shopify merchants see carrier price adjustments charged on their shipping labels. This policy explains what data the app processes.
What we access
When you install the app, it reads from your store through the Shopify Admin API: order numbers, order currency, shipping amounts, and the text of order timeline events. This is used only to find carrier price adjustments and show you a report about your own store.
We do not request or store customer names, addresses, email addresses or phone numbers. Timeline text can occasionally mention a person’s name (for example the staff member who created an order). The app reads that text transiently and does not store it.
What we store
- Store information: your store’s domain and the access token Shopify issues to the app.
- Adjustment records: order number, amount, currency, carrier, date and weight details of each carrier adjustment found.
- Anonymous wording patterns: when a timeline entry about an adjustment is in a format the app does not recognize, we keep an anonymized pattern of its wording to improve the app. Numbers, amounts, identifiers, links and proper names are removed before saving.
- Anonymous usage counts: events such as “scan completed”, without store identifiers or personal data.
How long we keep it
For as long as the app is installed. When you uninstall the app, all data for your store is deleted, and deleted again when Shopify sends its store-redaction request. Encrypted backups may retain deleted data for up to 7 days.
Security
Data is encrypted in transit (TLS) and stored on encrypted storage volumes.
Who processes data for us
Our hosting provider Fly.io (servers in the United States) and Shopify. We use no advertising or analytics services and we do not sell or share your data.
Data processing (merchant data)
For the store data the app reads, you are the controller and Plainwharf acts as your processor. This section forms part of the agreement between you and Plainwharf.
- Instructions: we process store data only to provide the app’s features as described in this policy, and for no other purpose.
- Confidentiality and access: access to production systems and stored data is limited to the person operating the app.
- Security: data is encrypted in transit (TLS) and stored on encrypted volumes. The app requests only the Shopify permissions it needs and does not request customer names, addresses, emails or phone numbers.
- Sub-processors: Fly.io (hosting and storage, United States). Cloudflare serves this website and forwards support email; it does not receive store data. Shopify provides the platform.
- Location: store data is stored in the United States.
- Deletion: when you uninstall the app all data for your store is deleted, and deleted again when Shopify sends its store-redaction request. Backups may retain deleted data for up to 7 days.
- Requests from your customers: the app stores no customer personal data. If we receive a privacy request about your customers we will tell you and point to the privacy webhooks the app already handles.
- Personal data breach: if we become aware of a breach affecting your store’s data we will notify you without undue delay, and within 72 hours where feasible, through a notice in the app and by email where we have your address.
- Assistance and information: we will reasonably help you meet your data protection obligations and, on request to support@plainwharf.com, provide information needed to show how the app processes your data.
Your rights
Because the app does not store customer personal data, requests from your customers under privacy laws (access, deletion) are handled automatically through Shopify’s privacy webhooks and result in no stored customer data to return or delete. To exercise your own rights as a merchant (access to or deletion of your store’s records), write to support@plainwharf.com.
Cookies
The app runs inside the Shopify admin and uses Shopify’s session mechanism. It sets no advertising or tracking cookies.
Changes
We will update this page when the app’s data handling changes and show the date above.
Plainwharf · support@plainwharf.com