Privacy Policy

Last updated: 21 September 2026

Checkout Guard ("the App") is operated by Artep tech (Aleksandar Stančević PR Računarsko programiranje Artep tech), Subotica, Serbia — registration no. 68211425, tax ID 115243761 ("we", "us"). The App lets Shopify merchants ("Merchants") set rules for what a cart may contain — quantities, order value, weight, shipping country, login — which Shopify enforces at checkout. This policy describes how we collect, use and share information when a Merchant installs the App. The App does not collect any data about a Merchant's customers: the rules are about products and carts, and the check runs inside Shopify.

Information we collect

When you install the App we receive, through Shopify's APIs, information needed to operate the service:

• Store information: store name, myshopify domain, store owner email, currency, weight unit, plan type.
• Catalogue information: ids and titles of the products a rule targets.
• Your rules: the rules you create and a log of each time they were pushed to Shopify.

The App does not receive orders, carts, customer records or card numbers. The rule itself is evaluated by a Shopify Function running inside Shopify, which never reports back to us.

How we use information

• To store the rules you create and push them to Shopify so the checkout can enforce them.
• To email you when something needs your attention (for example if Shopify refused an update), if you give us an address.
• To provide support and to operate, secure and improve the service.

We do not sell personal information and we do not use it for advertising.

Sharing

We share information only with processors needed to run the App: our hosting provider (Fly.io, servers in Frankfurt, Germany) and our transactional email provider (Resend, EU region) for notifications. Each processor acts on our instructions and is bound by data-processing terms. We do not sell personal data. We may disclose information if required by law or to protect our rights.

International transfers

Data is stored in the European Union. Where a processor transfers data outside the EU/EEA, it does so under standard contractual clauses or an equivalent lawful mechanism.

Retention and deletion

Your rules and settings are kept while the App is installed, so a reinstall finds them again. When a Merchant uninstalls the App, Shopify sends us a shop redaction request and we delete all data for that store within 30 days. Customer data requests and redaction requests from Shopify have nothing to return or erase, because the App stores no customer data.

Security

Data is transmitted over TLS and stored on access-controlled infrastructure. Access tokens are stored encrypted at rest by the hosting provider and are never exposed to browsers.

Your rights

Depending on where you live (including the EU/EEA, UK and California) you may have the right to access, correct, delete, port or restrict processing of your personal information, and to object to processing or lodge a complaint with a supervisory authority. Customers should contact the Merchant they purchased from; Merchants may contact us at support@arteptech.com. We respond within 30 days.

Children

The App is intended for businesses and is not directed at children under 16; we do not knowingly collect their data.

Changes

We may update this policy; the date above shows the latest version. Material changes will be announced inside the App.

Contact

Artep tech (Aleksandar Stančević PR Računarsko programiranje Artep tech), Subotica, Serbia — registration no. 68211425, tax ID 115243761 · support@arteptech.com