Privacy Policy
This app does not collect, receive or store any information about your customers. It reads your product, inventory and location data in order to show search results to your staff, and it stores the filter settings you choose. Nothing about a shopper ever reaches it.
Who we are
Summit & Spokes LLC, 2757 NW Raleigh St, Portland, OR 97210, United States. Contact us at support@summitandspokes.com.
Our role
For information about your shop and your subscription, we are the data controller. For anything we process from your Shopify store, you are the controller and we act as your processor, on your instructions. We do not use your data for our own purposes, do not sell it, and do not use it to train models.
What this app accesses
POS Filters requests three read-only permissions and no others:
- Products — to search and filter your catalog, including product types, brands, collections, categories, variant options and metafields.
- Inventory — to show live stock levels in search results.
- Locations — to show stock per location and to let you configure filters per location.
These permissions are read-only. The app cannot modify your products, inventory or locations. It requests no access to customers, orders, draft orders or checkout, so it is not technically capable of reading information about a shopper.
Product and stock data is read from Shopify at the moment a search runs and used to render the result. It is not copied into our database.
What we store
- Your shop’s myshopify.com domain.
- An access token issued by Shopify, which lets the app read the data above on your behalf.
- The filter configuration you choose — which filter groups your staff see, the values you curate, and your defaults, including any per-location overrides.
- Your subscription status and plan, so the app knows which features you are entitled to.
That is the complete list. There are no customer records, no order records, and no personal information about any shopper.
Billing
Subscriptions are charged through Shopify’s billing system. Shopify handles the payment; we never see or store your payment card details.
Where your data is stored
The application runs on Fly.io and its database is hosted by Neon, both in the United States. Distribution, billing and collection are handled by Shopify. If you are outside the United States, be aware that your data is processed there; we rely on standard contractual clauses where these are required.
We do not share your data with anyone else. We use no analytics, advertising or tracking services in this app.
How long we keep it
We retain the information above for as long as the app is installed on your store, because the app needs it to work. When you uninstall, Shopify sends us a shop redaction request and we delete your shop’s data within 48 hours of receiving it — the filter configuration, the subscription record and the access token.
Your rights
Depending on where you are, you may have rights to access, correct, delete or export your information, and to object to its processing. Email support@summitandspokes.com and we will respond within 30 days.
If you are a shopper rather than a merchant: this app holds no information about you. Any request about your data should go to the shop you purchased from.
Security
- All traffic is encrypted in transit using TLS.
- Access to production systems is limited to the owner of the business.
- Credentials are held in a managed secret store, never in source code.
- We carry technology errors and omissions and cyber liability insurance.
If something goes wrong
If information is exposed, we will notify affected merchants without undue delay so that you can meet your own obligations, and we will cooperate with any notification you have to make.
Changes to this policy
We will post any changes on this page and update the date at the top. If a change materially affects merchants, we will also notify you by email.