Bliss Production Guard privacy policy

Information we process

The app processes the minimum Shopify order information needed for its workflows: order and line-item identifiers, product and variant identifiers, SKU and titles, quantities, line-item custom attributes, fulfillment-order relationships, assigned locations, and app-owned hold information. Custom attributes can contain personalization text and are treated as personal data.

The app does not request or store buyer names, email addresses, phone numbers, postal addresses, or payment details.

How information is used

Information is used to evaluate merchant-defined production requirements, show review issues, record attributed corrections or exceptions, generate production cards, maintain an audit trail, recover background work safely, and manage app subscriptions and usage allowances.

Storage, service providers, and access

The app is hosted on Railway and uses Railway PostgreSQL. Shopify provides the store and subscription data used by the app. Data is transmitted over HTTPS. Access inside the app is limited by Shopify-authenticated Owner, Reviewer, and Operator roles and is isolated by store.

Bliss IT Services does not sell personal information or use order personalization data for advertising. Information is shared only with service providers needed to operate the app or when required by law.

Legal basis and merchant instructions

Bliss processes personal data to perform its agreement with the merchant, follow the merchant's documented instructions, protect the service, and comply with applicable law. The merchant is responsible for determining the lawful basis for customer data it submits to or makes available through Shopify.

International processing

Shopify and Railway may process information in countries other than the merchant's or customer's country. Where applicable law requires a transfer safeguard, Bliss relies on the legally recognized mechanism applicable to its provider relationship and processing.

Retention and deletion

For finished work with no open issue or Production Guard hold, personalization content is minimized after 30 days. Stored order snapshots expire after 60 days. Open work keeps the evidence needed to resolve it until it is closed or Shopify sends a valid deletion request.

The app processes Shopify's mandatory customer-data and shop-redaction webhooks. Customer redaction removes personalization content from stored evidence, corrections, validation results, and cards. Shop redaction removes the merchant installation and its tenant-owned records.

Privacy choices and requests

Depending on applicable law, individuals may have rights to access, correct, delete, restrict, or object to processing of their personal data. Because merchants control their customer relationships, a customer should normally contact the merchant first. Bliss will assist the merchant with verified requests and will process Shopify's mandatory privacy webhooks. Bliss does not sell personal information.

Security incidents and policy changes

Bliss will notify affected merchants without undue delay after confirming a personal-data breach involving their data. This policy may be updated as the service or legal requirements change. Material changes will be identified through the service and may require a new merchant acceptance before continued protected-data processing.

Contact

For privacy questions or requests, email hello@blissits.com or visit blissits.com/contact.