Privacy Policy

Order Cancel Pro gives customers a simple, self-service way to cancel eligible orders directly from their Shopify order experience, according to the cancellation rules a merchant configures. This policy covers the data the app processes in order to provide that functionality.

Information We Collect

To operate the app, we collect and process the following information:

• Store configuration — Cancellation rules, dialog text, cancellation reasons, and notification preferences that a merchant configures in the app.
• Order information — The order ID and related order details (via the Shopify Admin API) needed to process a cancellation the customer initiates.
• Cancellation reason — The reason a customer selects or enters when cancelling an order, when the merchant has this option enabled.
• Shopify access tokens — OAuth access tokens issued by Shopify that allow the app to act on the merchant's store, stored securely and used only to call Shopify's APIs.

How We Use Information

• To display and process order cancellations that a customer initiates from their Shopify order experience.
• To apply the merchant's configured cancellation rules, restocking, and notification settings.
• To send an optional admin notification email to the merchant's store contact email when a customer cancels an order.
• To enforce the plan limits associated with the merchant's selected subscription plan.

Sharing of Information

We do not sell customer or merchant data. Information is shared only as necessary to operate the app:

• With Shopify, via its Admin and Customer Account APIs, to read and cancel orders on the merchant's behalf.
• With the merchant's own store contact email, when Admin Notification is enabled, to notify them that a customer cancelled an order.

Data Retention and Deletion

We retain merchant configuration data for as long as the app is installed on a store. Order Cancel Pro implements Shopify's mandatory GDPR webhooks:

• customers/data_request — acknowledges a customer's request for their data.
• customers/redact — acknowledges a request to erase a customer's data.
• shop/redact — permanently deletes all of a store's data from our database after the app is uninstalled.

Security

Data is transmitted over encrypted (HTTPS/TLS) connections, and access to the merchant's store is authenticated using Shopify's OAuth and session token mechanisms.

Contact Us