This policy explains how ConsignClose handles information when a Shopify merchant installs or uses the service, when a vendor uses a merchant’s vendor portal, or when someone contacts support. ConsignClose is the service name; for privacy questions, contact support@mail.consignclose.com.
ConsignClose is designed for business-to-business consignment accounting. Merchants remain responsible for deciding what vendor and store data to enter and for giving vendors any notices required for their use of the service.
Information we handle
- Shop and account data: Shopify shop domain and identifier, installation state, encrypted Shopify session data, selected import settings, and Shopify App Pricing subscription status when billing verification is enabled.
- Catalog and sales records: product and variant identifiers, titles, vendor assignments, SKU and inventory details selected for sync, order identifiers and dates, line-item details, prices, discounts, tax and shipping totals, refund details, fulfillment status and dates, fulfilled line-item quantities, currency, and calculated commission and statement records. The app requests order data only after a merchant previews and confirms an import, and uses webhooks to queue later refreshes.
- Vendor information: vendor names, company names, email addresses, phone numbers, PayPal recipient email addresses, merchant notes, payout terms, vendor assignments, portal access records, product proposals and review notes, consignment agreement dates, scheduled price changes, migration references, and statements. Merchants may also store message titles and message content for vendor communications.
- Support and service data: messages sent to support, app actions needed for audit and reconciliation, email delivery status, and limited technical logs used to operate and secure the service.
ConsignClose does not request Shopify customer names, email addresses, phone numbers, or shipping addresses. Order sync stores only fields needed for consignment attribution and accounting; webhook payloads are reduced to allowlisted identifiers before they are retained. The service is not designed to store Shopify customer contact details. Avoid placing customer personal information in vendor notes or messages.
How we use information
- Provide product ownership, sales attribution, commission calculations, vendor statements, exports, reconciliation, vendor portal, and payout-record workflows.
- Authenticate Shopify shops and vendors, protect accounts, prevent duplicate processing, and keep tenant records separated by Shopify shop.
- Send merchant-requested vendor invitations, login links, statements, and messages; process delivery events and suppress addresses that bounce or complain.
- Provide support, diagnose service issues, maintain the service, verify app billing when enabled, and meet applicable legal or platform requirements.
When we share information
We share information with service providers only as needed to operate ConsignClose:
- Shopify provides shop authentication, catalog and order data, app installation and billing, and platform webhooks.
- Cloudflare hosts the application and its D1 database.
- Resend delivers service emails requested by merchants and reports email delivery events.
- PayPal receives payout recipient, amount, currency, and payout reference information only when a merchant connects PayPal and submits a payout through the app.
We do not sell personal information or share it for cross-context behavioral advertising. We may disclose information when required by law, to protect the service and its users, or in a business transfer subject to appropriate safeguards.
Retention and deletion
We keep a shop’s operational records while the app is installed and needed to provide the service. When Shopify reports an uninstall, we stop queued work, revoke vendor portal access, and remove the stored Shopify session. The remaining shop records are deleted when Shopify sends its shop-redaction request. You can also contact support to request help with deletion or access. Deletion from active app records may not immediately remove copies held under a provider’s backup, security-log, or legal-retention process.
After a shop-redaction request, we retain only Shopify’s delivery identifier and processing time in an isolated receipt so a duplicate signed deletion event cannot remove data from a later installation. This receipt does not include the shop domain or webhook payload.
To prevent repeat delivery to an address that bounced, generated a complaint, or was suppressed by Resend, ConsignClose stores a hash of the normalized address in a service-wide suppression index. The index does not store the original address and is not tied to one shop, so it can prevent another connected shop from sending to the same suppressed address. The address may still appear in the shop’s vendor record or email history until that shop’s records are deleted.
Shopify customer-data request and redaction events are acknowledged without exporting or deleting customer profiles because ConsignClose does not request or retain those customer contact fields.
Security and international processing
We use access controls and encrypt sensitive Shopify session data, stored PayPal secrets, and queued email content. Information may be processed in the countries where Shopify and our service providers operate. No online service can guarantee absolute security, so merchants should restrict staff access and protect their Shopify accounts.
Your choices and contact
Merchants can uninstall the app from Shopify, manage vendor records and email preferences in the app, and contact us about privacy requests. Vendors can use the preference link included in eligible emails or contact the merchant that invited them. For privacy questions, email support@mail.consignclose.com and include the Shopify shop domain. Do not send passwords, API secrets, or customer contact details by email.
We may update this policy as the service changes. The effective date above identifies the latest published version.