Privacy policy – Plainly

Who we are

Plainly is a small, independently owned software business in the United States that publishes apps for Shopify stores. “We” and “us” in this policy means Plainly. You can reach us at support@plainly-apps.com.

We wrote this policy in plain words on purpose. If anything in it is unclear, email us and we will explain, and improve the wording.

What we store about your store

When you install Plainly Ships-In, Shopify gives the app access to your store. The app asks only for permission to read and write products (write_products). Here is everything it keeps:

From Shopify, when you install and afterwards

Your store’s .myshopify.com address and Shopify store ID, the store name, time zone and language.
Whether the store is a development store, and which Plainly Ships-In plan the store is on, so we can turn the right features on.
An access token issued by Shopify that lets the app read your products and write processing times to them. The token is deleted the moment you uninstall.

What you type into the app

Your store default processing time, the days you ship, your order cutoff time and your holidays.
Your rules (for example “tag made-to-order: 2–3 weeks”) and the badge wording you choose.
The processing time you give individual products and variants.

From your catalogue

For products you give a time, or that a rule applies to: the product’s ID, title and handle, the variant’s ID and title, and the time assigned. This is what the Products page shows you.
To apply rules, the app reads product tags, vendors and collection membership from Shopify as needed. It does not keep a copy of your whole catalogue.

The app also writes the processing times to your own products as Shopify metafields in a namespace reserved for the app. That is how your theme displays the badge. These values live in your Shopify store, not on our servers. When the app is uninstalled, Shopify removes the app’s metafield definitions and the badge stops showing; Shopify clears the leftover values on its own schedule.

What we never collect

No customer data. The app does not request access to customers, orders, checkout or payments, so it cannot see who buys from you or what they buy. When Shopify sends us a customer data request or erasure request for your store, there is nothing to return or erase, and we confirm that.
Nothing from your shoppers. The badge on your product pages is rendered by Shopify from your theme and a small script served by Shopify’s content network. It sets no cookies, stores nothing in the shopper’s browser, and sends nothing to us or to anyone else. It only reads the shopper’s clock to work out a date.
No tracking or analytics inside the app or on this website.
No passwords or payment details. You pay through Shopify; we never see a card.

How we use it

Only to run the app for you: to show the right time on each product, apply your rules when your catalogue changes, know which plan you are on, and answer your support requests. We do not sell data, share it with advertisers, or use it to build profiles. We do not send marketing email; the only email you get from us is a reply to yours.

Who else handles it

We use a few services to run Plainly. Each only receives what it needs for its job:

Shopify: The platform the app runs on, and the one that bills you. Shopify’s own privacy policy covers your store.
Railway: Hosts the app and its database in the United States. Everything in the “What we store” section lives here.
Cloudflare: Serves this website and our domain’s DNS. It sees the requests any web server sees (IP address, browser type, pages requested) and keeps the short-lived logs described in its own policy.
Zoho Mail and Google Workspace: Handle our email. If you write to support@plainly-apps.com, your message, address and anything you attach pass through them.

We may also disclose information if the law requires it, or to protect the rights or safety of merchants, shoppers or Plainly. If Plainly is ever sold or merged, your data would move with the app and this policy would keep applying until a new one is posted.

How long we keep it

While the app is installed: everything above, so the app keeps working.
When you uninstall: the access token is deleted immediately. Your settings, rules and product times stay for 48 hours so that a quick reinstall picks up where you left off. After 48 hours Shopify sends us a “shop redact” request and we delete everything we hold about your store.
Support email: kept for as long as it is useful for helping you, and deleted on request.

To have your data deleted sooner, email us from the store’s address and we will do it by hand and confirm.

Security

Data moves over HTTPS only. Access tokens and settings sit in a private database, with access limited to the person who runs Plainly. Shopify verifies every request the app receives from your store, and every request the app sends to Shopify. No system is perfectly secure; if we ever discover a breach that affects your store we will tell you and Shopify promptly.

Your choices and rights

Depending on where you are, data protection law (for example the GDPR in Europe and the UK, or the CCPA in California) may give you rights to see, correct, export or delete personal information about you, to object to certain uses, or to complain to a regulator. Email support@plainly-apps.com and we will act within 30 days, and sooner when we can. We will not treat you differently for asking.

The little personal information the app sees about you as a merchant (your store’s contact details inside Shopify) is held because you installed the app and asked us to provide the service. The app is processed in the United States; if you are elsewhere, your data travels here to be processed.

The app and this website are for store owners and staff, not children. We do not knowingly collect information from anyone under 16.

This website

plainly-apps.com has no analytics, no cookies and no sign-up forms. The fonts and scripts are served from this site, not from third parties. The example badge on the home page runs entirely in your browser. Cloudflare serves the pages and keeps standard server logs, as described above.

Changes and contact

If we change this policy we will post the new version here with a new effective date, and, for anything that changes what we store or why, tell you inside the app before it takes effect.

Questions or requests: support@plainly-apps.com.