Security and data handling

A summary for merchants and their IT teams, taken from our privacy policy. If the two differ, the policy applies.

Security

Data is encrypted in transit, Shopify access tokens are encrypted at rest, and provider accounts use two-factor authentication. To report a security or data incident, email [email protected]. We acknowledge incident reports within one business day. If an incident affects your data, we'll notify you without undue delay.

Inside the Shopify admin, CreditHold uses Shopify's session tokens only. This website sets no tracking cookies.

What we store

• Your shop's domain, plan, currency, time zone, languages and the app settings you choose.
• Per-company aggregates: outstanding balance, overdue balance, number of overdue invoices, oldest due date, credit limit and the credit rules you turned on.
• Order ids and order names (such as #1043) of open B2B orders, used to compute those aggregates and to name the overdue invoice in the checkout message.
• Status events (for example, a company becoming overdue) and records of orders placed while a company was blocked.
• Notes your staff type when allowing an order or unblocking a company. Don't put personal data in them.
• The Shopify access token for your shop, encrypted at rest.

What we do not store

We never store buyers' names, email addresses, phone numbers or postal addresses. Order payment status and payment schedules are read from Shopify to compute balances; only the per-company aggregates and order ids above are kept.

Why we need these permissions

read_all_orders lets us read open orders older than 60 days, where overdue invoices on longer payment terms are. read_customers is used only to learn which company and location placed an order. read_locales tells us your store's language for the default checkout messages.

How we use it

Only to provide the app: computing balances, showing them to you in the Shopify admin, blocking checkout for the companies you protect, and sending you alerts. We do not sell data, use it for advertising, or share it beyond the subprocessors below.

What CreditHold does to your orders

Nothing. CreditHold never cancels or changes orders. It only stops new orders on payment terms at checkout.

Retention

• Status events are kept for 90 days.
• The log of customer data requests (order ids only) is kept for 90 days.
• Records of orders placed while a company was blocked are kept for 13 months.
• Webhook ids are kept for 7 days, to ignore duplicates.

If you uninstall

Uninstalling removes the CreditHold checkout rule, so nothing is blocked any more. We delete your store's data within 30 days.

Subprocessors and transfers

• Microsoft Azure: application hosting (Paris, France (Microsoft Azure France Central)).
• Microsoft Azure: managed Postgres database (Paris, France (Microsoft Azure France Central)).

Where a subprocessor processes data outside the European Economic Area, the transfer relies on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

Read the full privacy policy.