Privacy Policy

Who controls the data

The merchant who installs Counterline is the data controller for their customers’ information. Mama Dog LLC operates Counterline as a processor acting on that merchant’s instructions.

What Counterline stores

• Shop and installation records. Your myshopify.com domain, plan, currency, and the access tokens Shopify issues so the app can call the Admin API on your behalf.
• Quote records. Line items, quantities, retail prices, catalog prices, negotiated prices, purchase order numbers, terms and internal notes.
• Buyer contact details. The name and email address of the company contact a quote is addressed to, so the quote can be delivered and the negotiation attributed.
• Negotiation history. Messages exchanged on a quote, price changes, and the timestamped decisions behind them.

Counterline does not store payment card details, and does not receive them. Payment is handled entirely by Shopify.

What Counterline reads but does not keep

Company, location, catalog and price list data is read from Shopify each time a price is resolved, so that a quote reflects the current catalog rather than a stale copy. Product and pricing data is not mirrored into Counterline’s database.

Who else processes it

• Shopify — source of all company, catalog and order data, and the destination for the orders Counterline creates.
• Fly.io — application hosting and the PostgreSQL database, in the United States.
• Resend — delivery of quote emails and expiry reminders to buyer contacts.

Counterline does not sell data, does not use it for advertising, and does not use it to train machine learning models.

How long it is kept

Quotes are commercial records and are retained while the app is installed, and for 48 hours after uninstall — a merchant who reinstalls expects their history intact. After that window Shopify sends a shop redaction request and all data for that shop is deleted.

When Shopify sends a customer redaction request, personal identifiers — buyer name, email, and buyer-supplied notes — are removed from the affected quotes while the commercial record is preserved. Access tokens and sessions are deleted immediately on uninstall.

Requests about your data

Shopify’s data request, customer redaction and shop redaction webhooks are all implemented and acted on. Buyers should direct requests to the merchant they are trading with, who can raise them through Shopify. Merchants can contact support@counterline.app directly.

Security

Data is encrypted in transit. Access tokens are stored server-side and are never exposed to the browser. Every query is scoped to the installing shop, so one merchant’s records cannot be read by another.

Changes

Material changes to this policy will be reflected in the date at the top of this page before they take effect.