Privacy Policy

Who controls the data

The merchant who installs Counterline is the data controller for their customers’ information. Mama Dog LLC operates Counterline as a processor acting on that merchant’s instructions.

The binding terms of that arrangement — what may be processed, the subprocessors used, security, assistance with data subject requests, and deletion — are the data protection section of the Terms of Service. This policy describes what happens; that section is what we are obliged to do.

What Counterline stores

• Shop and installation records. Your myshopify.com domain, plan, currency, and the access tokens Shopify issues so the app can call the Admin API on your behalf.
• Quote records. Line items, quantities, retail prices, catalog prices, negotiated prices, purchase order numbers, terms and internal notes.
• Buyer contact details. The name and email address of the company contact a quote is addressed to, so the quote can be delivered and the negotiation attributed.
• Negotiation history. Messages exchanged on a quote, price changes, and the timestamped decisions behind them.
• Team members. For each of your staff who opens Counterline: Shopify’s identifier for their account, the name they choose to give, their role, and when they last used the app. This is how your plan’s user limit is applied and how actions on a quote are attributed to the person who took them.
• Abuse limits. Short-lived counters that cap how often your storefront quote form can be used. Where a counter relates to an email address, it stores a one-way digest of the address, never the address itself, and is deleted within a day.

Counterline does not store payment card details, and does not receive them. Payment is handled entirely by Shopify.

What Counterline reads but does not keep

Company, location, catalog and price list data is read from Shopify each time a price is resolved, so that a quote reflects the current catalog rather than a stale copy. Product and pricing data is not mirrored into Counterline’s database.

Who else processes it

• Shopify — source of all company, catalog and order data, and the destination for the orders Counterline creates.
• Fly.io — application hosting and the PostgreSQL database, in the United States.
• Resend — delivery of quote emails and expiry reminders to buyer contacts.

Counterline does not sell data, does not use it for advertising, and does not use it to train machine learning models.

How long it is kept

Quotes are commercial records and are retained while the app is installed, and for 48 hours after uninstall — a merchant who reinstalls expects their history intact. After that window Shopify sends a shop redaction request and all data for that shop is deleted.

When Shopify sends a customer redaction request, personal identifiers — buyer name, email, and buyer-supplied notes — are removed from the affected quotes while the commercial record is preserved. Access tokens and sessions are deleted immediately on uninstall.

Server errors are recorded separately so that failures can be investigated after the fact, and are deleted after 30 days. Email addresses, phone numbers and credentials are stripped before an error is written down, and a shop’s error records are deleted along with the rest of its data.

Requests about your data

Shopify’s data request, customer redaction and shop redaction webhooks are all implemented and acted on. Buyers should direct requests to the merchant they are trading with, who can raise them through Shopify. Merchants can contact support@counterline.app directly.

Security

Data is encrypted in transit. Access tokens are stored server-side and are never exposed to the browser. Every query is scoped to the installing shop, so one merchant’s records cannot be read by another.

Changes

Material changes to this policy will be reflected in the date at the top of this page before they take effect.