Privacy Policy

Effective date: March 4, 2026 · Chaqueta Labs

This Privacy Policy explains how TaskTracker (“the App”), operated by Chaqueta Labs (“we”, “us”, “our”), collects, uses, and protects information when you install and use the App through the Shopify platform.

1. Information We Collect

Session & authentication data. When you install the App, Shopify provides us with your shop URL and the name and email address of the staff member who authorizes the installation. We store a session token so you can stay logged in.

Task reference data. When you create tasks, the App stores references (Shopify Global IDs) to customers, orders, and products you attach to those tasks. These references are stored as Shopify metaobjects inside your own Shopify store.

No customer PII stored outside Shopify. We do not copy or store customer names, emails, addresses, or any other personally identifiable information outside of Shopify. The App only reads customer, order, and product data on demand to display titles and names within the task interface.

2. How We Use Your Information

• Authentication: Session data is used solely to authenticate your access to the App.
• Task management: Reference IDs are used to display related customers, orders, and products within your tasks.

3. Data Storage & Security

Task data (metaobjects) is stored in your Shopify store and is governed by Shopify’s security practices. Session data is stored in an encrypted database hosted on Fly.io. All data is transmitted over HTTPS and encrypted at rest.

4. Third-Party Sharing

We do not sell, rent, or share your data with any third parties. Data stays within your Shopify store and the App’s session database.

5. Data Retention & Deletion

• Sessions expire automatically. When you uninstall the App, your session data is deleted in response to Shopify’s app/uninstalled webhook.
• Metaobjects (tasks) remain in your Shopify store after uninstall since they are your data. You can delete them at any time through Shopify Admin.
• Shop data is fully redacted when we receive Shopify’s shop/redact webhook.

6. GDPR & Data Subject Rights

We comply with GDPR and Shopify’s mandatory data-privacy webhooks:

• customers/data_request: We respond with any data we hold related to the specified customer (typically only a reference ID within task metaobjects).
• customers/redact: Customer reference data is removed from tasks upon request.
• shop/redact: All shop session data is permanently deleted.

7. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

8. Contact Us

If you have questions about this Privacy Policy or your data, contact us at chaquetalabs@gmail.com.