Privacy Policy

Version 1.16 corrects section 2 on the record of your plans. It names everything the record holds, including your store's domain and whether a plan ended because you moved to another paid plan. It also says that after a transfer the app reads the record to know when to stop telling you why your store is on the free plan. Section 7 adds that whether a plan ended in a change to another paid plan stays in the count. The app already kept and used the record this way. It takes away none of your rights and applies from the day we post it. Version 1.15 makes section 6 more exact about what we give the AI tool we work with when we want its help answering your question. It also adds that the tool reads the reviews published on our App Store page and writes and posts our public replies. It changes nothing about your store's data. It applies from the day we post it. Version 1.14 brings the policy in line with what the app does. Section 2 says how long the copies of your rules are kept and what the customization record holds. It also adds the record of the app's request for a review to sections 2, 5 and 7. Sections 6 and 7 add the backups of the database. Section 6 adds the AI tool the people who run the app work with. Sections 3 and 9 say what a rule you write can hold about a customer. It applies from the day we post it. Version 1.13 removes from section 2 the sentence on the request records stored before 13 September 2026. Those records have now run out. It changes nothing about your store's data. It applies from the day we post it. Version 1.12 adds to section 14 the visitor's consent to the analytics cookie. Shopify's page is set to ask for it in the European Union, the European Economic Area, Switzerland and the United Kingdom. It changes nothing about your store's data. It applies from the day we post it. Version 1.11 adds to sections 2, 5 and 7 the record the app keeps when your store is a partner development store. It applies from the day we post it. Version 1.10 adds section 14, on the people who view the app's page on the Shopify App Store, and Google Analytics to the companies in section 6. It changes nothing about your store's data. It applies from the day we post it. Version 1.9 adds to section 2 a second use of the reading of your shipping settings. It decides whether a box of the preset "Hide a rate above a cart total" starts ticked. It applies from the day we post it. Version 1.8 adds to sections 2, 5 and 7 the reading of your shipping settings and the record of the first rule the app proposes to you. It applies from the day we post it. Version 1.7 adds the record of the plan you choose to sections 2, 5, 7 and 9. It applies from the day we post it. Version 1.6 changes section 7. When Shopify cannot confirm to us that the app was removed, we keep your store's data and its access token until it does. We also keep the record of your uninstall until then. We tell you in the app at least 30 days before it takes effect. Under section 12, this change takes effect on 7 November 2026.

This policy explains what data the app handles, why, where it is kept, and how to have it deleted. It is written for the merchant who installs the app. Section 14 is about the people who view the app's page on the Shopify App Store. The English text is the binding one. An Italian translation is provided for convenience.

1. What the app does

The app lets you hide, rename and sort the shipping rates your customers see at checkout, based on rules you write. The rules run inside Shopify's checkout as a Shopify Function. If the app ever fails, the checkout shows your rates exactly as you set them in Shopify.

2. Data we store about your store

When you install the app, Shopify gives us:

• your store's myshopify.com domain;
• an access token that lets the app write delivery customizations to your store and read its shipping settings, and nothing else. Those settings are your shipping zones and the names, prices and conditions of your rates;
• the list of permissions you granted.

While you use the app, we store:

• the rules you write, with their names, conditions and order;
• a copy of your rules after every change, so you can restore them. At each change, the copies older than 30 days are deleted. The newest copy is always kept while the app is installed;
• the identifier of the delivery customization the app creates in your store. With it we keep the time of the last successful write of your rules to it and, when a write fails, its error. We also keep the time your rules began running at checkout without a break;
• the identifiers of the notices Shopify sends us, so each is handled once;
• for each notice we give your store (section 12), the record that it was shown to you and when you marked it read. From 4 November 2026 the record also holds whether and when the notice was emailed to you;
• from 4 November 2026, the email address Shopify holds for your store, so we can send you the notices in section 12. That is the store owner's address, or the store's public contact address when Shopify gives us no owner address. From that date the app reads it when a staff member opens the app, at most once a week, and stores it with the date it was read. From that date it also reads it once for each store where the app is installed, without anyone opening the app. We use it for nothing else. It is never shown in the app and never written to a log;
• if you choose a paid plan, a record of it. It holds your store's myshopify.com domain, the plan, when its trial starts and ends, and whether it is a test charge. With it we keep Shopify's identifier of the charge, the dates the plan started and ended, and whether it ended because you moved to another paid plan. We use it to count how many stores are on each plan and how many trials turn into a paid plan. After a transfer the app also reads it. Once your store has held a paid plan since the transfer, the app stops telling you why your store is on the free plan;
• whether and when the app offered you a first rule, and whether and when you saved it or set it aside. We use this record so the app does not offer that rule again after you save it or set it aside. We also use it to count how many stores are offered it, save it or set it aside;
• if Shopify tells the app that your store is a partner development store, a record of it. It holds your store's myshopify.com domain and the last time the app found the store to be one. Once it is no longer one, the record also holds when the app found that out. We use it to keep your rules on when Shopify's answer does not reach the app. We also use it to tell you after a transfer why your store is on the free plan, and to count how many development stores use the app. And we use it so the app can tell that a test charge from its development days is not a paid plan;
• a record of the app's request for a review. It holds when the app showed you Shopify's review window, the last answer that window gave and when the request ended. It also holds when you closed or clicked the earlier review banner. We use it to ask you for a review once, after your rules have run at checkout for seven days, and not again.

The app reads your shipping settings only when you open its home page and your store has never had an active rule. It stops once you save or set aside the first rule it proposes. It reads them to propose that first rule, built from your own rates. The same reading decides whether the box "Only when the checkout offers free shipping" starts ticked in the preset "Hide a rate above a cart total". The box starts unticked only when none of your active rates is free. The app keeps none of them: it stores no zone, rate name, price or condition, and writes none of them to a log. Nothing is written to your store until you click to create the rule.

Shopify tells the app which language your admin is set to every time a page loads, so the app can show itself in Italian or English. We do not store it.

If you write to our support address, we store your message, the address you wrote from and any name you give us, so we can answer you and follow up later.

Our servers also keep technical logs of requests for 30 days. For a request to the app the server writes one line. It holds the time, the method, the address requested without anything after a question mark, the status and the duration. When the request carries your store's web address, the line holds a short tag that stands for your store, computed with a key, in place of that address. Where the app's other lines name your store, they hold that tag too. They also hold fields such as the kind of notice Shopify sent us, Shopify's identifier of that notice and what the app did with it. Others hold counts and the details of an error. The app's logger refuses a field that holds a name, an email address, a postal address, a customer number or a credential. Lines that Node or React Router write by themselves are kept as they are written, outside that rule.

Since 13 September 2026 we no longer store the record that Google's hosting platform makes of each request. That record was the only place the network address of the browser or server making the request was written. Google processes the network address to deliver each request and keeps its own record of that under its own terms. We do not receive it.

3. Data we do not collect

We do not receive or store your customers' names, addresses, email addresses, phone numbers, orders or payment details, except what you write into a rule yourself (section 9).

Your rules run inside Shopify's checkout. At that moment, Shopify's own systems read the cart total, the destination country, province and postcode, and the product and customer tags your rules refer to. That reading happens on Shopify's infrastructure. Nothing about the customer or the cart is sent to our servers.

The app asks Shopify for an offline access token only. Shopify does not give us the name or the email address of the person who installs or opens the app. From 4 November 2026 we read one address, the one Shopify holds for the store (section 2), which is often the owner's own.

The app sets no cookies of its own and uses no analytics or advertising trackers. The app's page on the Shopify App Store is Shopify's page, not part of the app. Section 14 covers it.

4. Our role

For the data we hold about your store and your account, we decide why and how it is used, so we are the controller of it. Where we handle personal data on your behalf, for example a name inside a rule you wrote, we act on your instructions as your processor. If your business needs a signed data processing agreement, write to support@larchline.co and we will send one.

5. Why we use this data

• To run the app for you: storing your rules and writing them to your store. This is necessary to provide the service you asked for.
• To tell you about a change to this policy, our terms or our prices. We also tell you if we shut the service down, if the app passes to another company, or if there is a security problem. We give these notices in the app and, from 4 November 2026, by email, as section 12 says. This is necessary to provide the service you asked for.
• To propose a first rule built from your own shipping rates, when you open the app and have no rule yet. This is necessary to provide the service you asked for.
• To count how many stores are offered a first rule, save it or set it aside. Only the totals leave the database. We have a legitimate interest in knowing how the app is doing.
• To help you: answering your support requests and finding the cause of a problem.
• To count how many stores are on each plan and how many trials turn into a paid plan. Only the totals leave the database. We have a legitimate interest in knowing how the app is doing.
• To keep your rules on when Shopify's answer about your store does not reach the app. And to tell you after a transfer why your store is on the free plan. And so the app can tell that a test charge from before the transfer is not a paid plan. This is necessary to provide the service you asked for.
• To count how many development stores use the app. Only the totals leave the database. We have a legitimate interest in knowing how the app is doing.
• To ask you once for a review of the app, after your rules have worked for you for a week. We have a legitimate interest in asking the stores that use the app what they think of it.
• To keep the app secure and reliable: logs, error tracking and the detection of misuse. We have a legitimate interest in this.
• To meet legal duties, such as answering a request from Shopify or a public authority.

We never sell your data and we never use it for advertising.

6. Where the data is kept

Your store's data is stored on Google Cloud servers in Belgium (region europe-west1). Google Cloud makes a daily encrypted backup of the database and keeps it in the European Union. Support email is handled on Microsoft 365. Shopify itself holds your store's data under its own privacy policy.

We are a United States company. The two people who run the app work from the United States. They build and run the app with Claude, an AI tool made by Anthropic PBC in the United States. A written rule binds that work: the tool never reads your customers' data, the rules stored in the app or your emails to us. When we want help answering a question you sent us, a person gives it only the question, without names, email addresses or order details. The tool also reads the reviews published on our App Store page, with the store details Shopify shows beside them, and writes and posts our public replies. It works only through the operators' own Google sign-in, not an account of its own. Technical messages it works with can still show your store's web address. If you write to us, your message may be read in the United States. Store data stays on the servers in Belgium and in the backups in the European Union, apart from the notice emails in the next paragraph.

From 4 November 2026, Resend sends the notice emails described in section 12. It receives the address Shopify holds for your store and the text of the notice. That text holds nothing about your customers. Resend stores the email and the record of its delivery in the United States and keeps them for 30 days.

When we checked on 26 September 2026, Google LLC, Microsoft and Resend were on the Data Privacy Framework list for transfers from the European Union to the United States. Google LLC provides both Google Cloud and Google Analytics. Resend's data processing terms also state that the standard contractual clauses the European Commission has approved apply to such transfers. Where that framework does not cover a transfer to Google Cloud, Microsoft or Resend, we rely on the standard contractual clauses the European Commission has approved, which are part of our contracts with them.

Companies that process or receive data for us:

7. How long we keep it

• Your rules, their history and the access token: for as long as the app is installed.
• When you uninstall the app: the access token and the customization record are deleted at once, and so is the email address Shopify holds for your store. Your rules, their history and the records of our notices are deleted about 48 hours after you uninstall, when Shopify tells us the store has removed the app. If that notice does not reach us, we delete them ourselves, at the earliest 14 days after you uninstall and normally within 30 days. Only if Shopify cannot confirm to us that the app was removed do we keep them longer, until it does. If Shopify does not answer when we check the uninstall, the access token stays until the rest is deleted, so we can ask again. Write to us if you want them deleted sooner.
• The record that a Shopify notice was handled: deleted within 30 days after the notice arrives. We keep it at least 23 days, so the same notice is not handled twice, except in the two cases that follow. When your store's data is deleted (the point above), these records go with it. Only the record of Shopify's deletion notice can stay (section 9). If you install the app again after an uninstall, Shopify may confirm to us that it is installed. The record of that uninstall can then be deleted at once, and at the latest 14 days after it arrives. Only the record of your uninstall is kept longer than 30 days, when Shopify cannot confirm that the app was removed. We keep it until Shopify does, because it tells us when to delete your data.
• The record that a notice from us (section 12) was shown to your store and, from 4 November 2026, emailed to it: while the app is installed. We keep it so you can see that you were told.
• From 4 November 2026, the notice emails at Resend, with the records of their delivery: 30 days.
• The record of your plans (section 2): while the app is installed. When you uninstall, the plans in it are marked as ended. Your store's data is deleted normally about 48 hours after you uninstall, as the second point says. At that moment the record loses its link to your store and to Shopify's identifier of the charge. What remains is each plan, its dates, whether it was a test charge and whether another paid plan replaced it, with nothing that names your store. We keep that only as a count.
• The record of the first rule the app offered you (section 2): while the app is installed. It is deleted with the rest of your store's data, as the second point says.
• The development-store record (section 2): it stays when you uninstall the app and is deleted with the rest of your store's data, as the second point says.
• The record of the app's request for a review (section 2): it stays when you uninstall the app. It is deleted with the rest of your store's data, as the second point says.
• Deleted data can remain in the encrypted database backups for up to 8 days, until those backups are replaced.
• The listing-page records of section 14: Google Analytics keeps them at most 14 months, counted from a returning visitor's last visit.
• Technical logs: 30 days.
• Support emails: up to 24 months, so we can follow up on earlier requests.

8. Your rights

If you are in the European Union, the European Economic Area, the United Kingdom or Switzerland, you can ask us at any time to:

• see the data we hold about your store;
• correct it;
• delete it;
• receive it in a portable format;
• object to a use based on our legitimate interest.

Write to support@larchline.co. We answer within 30 days. You can also complain to your data protection authority. In Italy that is the Garante per la protezione dei dati personali.

9. Requests that come through Shopify

Shopify sends apps three kinds of privacy notices. This is how the app answers them:

• Customer data request: we hold no data about your customers, apart from what you write into a rule yourself, such as a name or a customer tag. You can see, change and delete that in the app. So the app returns nothing, and you answer such a request yourself from the rules you see in the app.
• Customer data deletion: for the same reason the app deletes nothing. You remove such a name or tag from your rules in the app. Earlier copies of your rules keep it until they are deleted at a later change, as section 2 says.
• Store data deletion: we delete everything we hold about the store, except the record of your plans. That record loses its link to your store and stays only as a count (section 7). The deletion includes our notices and the records of them and, from 4 November 2026, the email address Shopify holds for your store. One record that the deletion happened stays, so the same notice is not processed twice. We delete it at the earliest 23 days after it arrives, and in any case within 30 days after you uninstall.

10. Security

Access tokens and database passwords are kept in a secrets manager, never in code. Data travels encrypted. Only the app and the people who run it can reach the database. If a security problem ever affects your data, we tell you without undue delay.

11. Children

The app is a tool for merchants and is not directed at children.

12. Changes to this policy

When we change this policy, we post the new version with its date. For a change that affects your rights, we tell you before it takes effect.

How we tell you. Where this policy says we tell you something, the app shows the notice on every page until you mark it read. It stops showing 30 days after the change takes effect, or 60 days after we post it when it names no date. From 4 November 2026 we also send it by email to the address Shopify holds for your store, when Shopify gives us one (section 2). The sender is noreply@larchline.co, and you can reply to support@larchline.co. These emails are about the app and this policy only. We never use them for advertising.

13. Contact

Scena Labs LLC 522 W Riverside Ave, Ste N Spokane, WA 99201 United States support@larchline.co

14. Visitors to the app's page on the Shopify App Store

This section is about anyone who views the app's page on the Shopify App Store, apps.shopify.com/regole-di-spedizione, merchants included. It changes nothing about your store's data or your customers' data in the app. The app itself uses no analytics (section 3).

That page is Shopify's page. In Shopify's form for the page we give Shopify our Google Analytics 4 measurement ID, G-HW4YK7ZT1M. Shopify's page then sends Google Analytics a record of each view of the page and of each click on its buttons to install or open the app. Depending on its settings, Google Analytics can also record other actions on the page, such as scrolling or a click on a link. Google Analytics sets a cookie with an identifier in the visitor's browser. Shopify's own privacy policy covers the rest of Shopify's site.

We use these records only to count the views of the page and the clicks on those buttons: by page, by country and by day. In Google's reports we look at totals, never at a single visitor, and we never try to identify one. We do not use them for advertising, and we do not combine them with the data the app holds about stores. The reason is our legitimate interest in knowing how many people view the page and install the app from it. In the European Union and the European Economic Area a cookie like this needs the visitor's consent. Shopify's page is set to load Google Analytics there only after the visitor accepts analytics cookies in Shopify's cookie choice. It does the same for visitors in Switzerland and the United Kingdom. For those visitors Shopify's page is set to place the cookie only with their consent. For visitors in the European Union, the European Economic Area and the United Kingdom, where that consent is collected, both the cookie and the counting rest on it. For the counting the basis is Article 6(1)(a) GDPR, and in the United Kingdom the UK GDPR. For the cookie it is §25(1) TDDDG in Germany, article 122 of the Italian privacy code in Italy and regulation 6 of PECR in the United Kingdom. Visitors can withdraw their consent at any time, with effect for the future. To do so they can change their choice in Shopify's cookie banner or delete all stored data of apps.shopify.com in their browser. For visitors elsewhere the basis stays the legitimate interest above. The rights in section 8 apply to these records too.

Google LLC, in the United States, provides Google Analytics and receives these records, so they go to the United States (section 6). We stay responsible for our use of them. Google Analytics keeps them at most 14 months, the longest a standard Google Analytics property allows. For a visitor who comes back, those 14 months can count from the last visit. Google states that Google Analytics 4 does not log or store IP addresses.