Dropsoon — Privacy policy

Dropsoon helps Shopify merchants take pre-orders using Shopify’s native pre-order purchase options. This policy explains what we process, how we protect it, and your rights.

Data we process

• Pre-order campaign settings: product and variant IDs, product title and handle, deposit, balance due date, ship date, quantity limit, and end date.
• The inventory settings a campaign changes (overselling policy and stock levels per location), stored so they can be restored exactly when the campaign ends.
• Pre-order counts: order ID, order number, product, variant, and quantity.
• The store’s Shopify access token, used to call the Shopify API on its behalf.

We do not store shopper names, email addresses, postal addresses, phone numbers, or payment details. Merchants see the customer behind a pre-order in their own Shopify admin. Payments, deposits, and balances are handled entirely by Shopify’s checkout. We never sell data.

Note on the App Store’s data-access disclosure: Shopify lists every field an app’s API permissions could technically read. Access is not collection — Dropsoon only stores the data listed above.

How we protect it

• All data is transmitted over TLS (HTTPS) and encrypted at rest by our database provider.
• Access is scoped per store; secrets are held in an encrypted secret store, never in code.

Retention & deletion

All data for a store is deleted when the app is uninstalled. We also honor Shopify’s GDPR customer data-request, customer-redact, and shop-redact webhooks.

Sub-processors

• Shopify — the platform your store runs on.
• Vercel and Neon — application hosting and database.

Your rights

Under the GDPR and similar laws you can request access to, correction of, or deletion of your personal data. Because Dropsoon holds no shopper personal data, shoppers should contact the store they bought from. Merchants can contact us directly.

Contact

support@dropsoon.shop — Pálinkás András E.V., Petőfi utca 6, 7668 Keszü, Hungary (tax ID: 55597096-1-22)