Privacy Policy

Mountain Stack Labs ("we", "us", or "our") operates ETAFlow - Estimated Delivery (the "App"), a Shopify application that helps merchants display estimated delivery dates on their storefront. This Privacy Policy explains how we collect, use, and protect information when you install or use the App.

Who this policy applies to

This policy applies to merchants who install the App on their Shopify store. The App is intended for use by store owners and staff, not end customers. If you are a customer shopping on a merchant's store, please refer to that merchant's privacy policy for how they handle your personal information.

Information we collect

When you install and use the App, we may collect:

• Shop and account information — your Shopify store domain, app installation details, and basic staff profile information provided by Shopify during authentication (such as name and email).
• Session and access data — OAuth tokens and session records required to operate the App on your store.
• Widget configuration — delivery rules, design settings, widget names, and related preferences you save in the App admin.
• Store data accessed via Shopify APIs — product, inventory, market, theme, and file information needed to calculate delivery estimates, resolve widget placement, and show activation status. We access this data through Shopify's Admin API using the permissions you grant at install time.
• Storefront request data — when a shopper views a product page with the widget, our app proxy may receive non-personal request parameters such as product ID and market ID to render an estimated delivery date. We do not intentionally collect shopper names, emails, or payment details through the widget.

How we use information

We use the information above to:

• Provide, maintain, and improve the App and its features
• Authenticate your store and keep your session secure
• Save and display your widget settings
• Calculate and show estimated delivery dates on your storefront
• Detect whether the App block is active in your theme
• Respond to support requests and troubleshoot issues
• Comply with legal obligations and enforce our terms

How we share information

We do not sell your personal information. We may share information only in these limited cases:

• Shopify — the App runs on Shopify's platform and uses Shopify APIs; data flows through Shopify as part of normal app operation.
• Service providers — trusted hosting, database, and infrastructure providers that process data on our behalf under contractual safeguards.
• Legal requirements — when required by law, court order, or to protect our rights, users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to continued protection of your information.

Data retention

We retain shop session data and widget configuration for as long as the App is installed on your store. When you uninstall the App, we delete associated session and widget data within a reasonable period, except where we must retain information to comply with law or resolve disputes.

Security

We use commercially reasonable technical and organizational measures to protect information, including encrypted connections and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your responsibilities as a merchant

You are responsible for ensuring your use of the App complies with applicable privacy laws and for providing appropriate notices to your customers if required. The App displays delivery estimates on your storefront; you remain the data controller for any customer-facing processing on your store.

Your rights

Depending on your location, you may have rights to access, correct, delete, or restrict processing of personal information we hold about you. To exercise these rights, contact us through the Shopify App Store listing for this App. You may also uninstall the App at any time from your Shopify admin.

Changes to this policy

We may update this Privacy Policy from time to time. We will revise the "Last updated" date at the top of this page when changes are posted. Continued use of the App after changes become effective constitutes acceptance of the updated policy.