Privacy Policy
This Privacy Policy explains how Keystone collects, uses, stores, and shares information when merchants install or use our Shopify app, related onboarding pages, and supporting marketing site experiences.
For how we handle data from Google APIs, see our Google API Services Limited Use Disclosure.
Information we collect
When a merchant installs Keystone through Shopify or submits information through our website, we may collect business contact information, store identifiers, account details, onboarding responses, and support communications.
To provide the app, we may also process data made available through Shopify, including products, inventory, customers, companies, orders, fulfillments, locations, and related store metadata that the merchant authorizes us to access.
- Merchant and staff contact details, such as name, email address, and store domain
- Shopify store data needed to power catalogs, campaigns, order entry, reporting, and related workflows
- Technical data such as browser type, device information, IP address, and diagnostic logs
- Information sent to us through waitlist, onboarding, support, or other communications
How we use information
We use information to operate, maintain, secure, and improve Keystone, including syncing Shopify data, enabling merchant workflows, providing customer support, and communicating about the service.
- To provide app functionality and merchant-requested services
- To authenticate users, prevent abuse, and protect the security of the platform
- To monitor performance, troubleshoot issues, and improve product experience
- To send transactional notices, onboarding updates, and important service communications
- To comply with legal obligations and enforce our agreements
How we share information
We do not sell personal information. We may share information with service providers that help us host, secure, analyze, support, and operate Keystone, as well as with Shopify or other integrations when required to deliver requested functionality.
We may also disclose information if required by law, to protect our rights or users, or in connection with a merger, acquisition, financing, or asset sale.
Data retention and deletion
We retain information for as long as reasonably necessary to provide the service, maintain business and security records, resolve disputes, and comply with legal obligations.
If a merchant uninstalls the app or requests deletion, we will work to delete or anonymize data within a reasonable period unless we are required to retain certain records for legal, security, accounting, or fraud-prevention purposes.
Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information from unauthorized access, loss, misuse, or alteration. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
Merchant rights and end-customer requests
Merchants may request access, correction, export, or deletion of their information by contacting us. If you are an end customer of a merchant that uses Keystone, that merchant is generally the controller of your data and is the best first point of contact for requests about your information.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices, product features, or legal obligations. When we do, we will update the "Last updated" date on this page.
Contact us
Questions about this policy or data handling can be sent to our team at support@keystoneb2b.io.